Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-1171.
PoCs published by Osanda Malith Jayathissa, Ruben Alejandro, including Metasploit module exploits/windows/fileformat/gsm_sim.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in Sim Editor v6.6 to execute arbitrary shellcode. It provides two payload options (MS Paint and Bind Shell) and generates a malicious .sms file to trigger the vulnerability.
Description
Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry in a .sms file.
Exploits (2)
This exploit leverages a stack-based buffer overflow in Sim Editor v6.6 to execute arbitrary shellcode. It provides two payload options (MS Paint and Bind Shell) and generates a malicious .sms file to trigger the vulnerability.
This Metasploit module exploits a stack-based buffer overflow in GSM SIM Editor 5.15 by crafting a malicious .sms file. It leverages a known vulnerability (CVE-2015-1171) to execute arbitrary code via a specially formatted payload.