CVE-2015-3205
libmimedir - Remote Code Execution via Malformed VCF File
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2015-3205. PoCs published by Jeremy Brown.
AI-analyzed exploit summary This PoC exploits a memory corruption vulnerability in libmimedir by crafting a malicious VCF file with NULL bytes to manipulate free() calls during lexer cleanup, potentially leading to arbitrary code execution.
Description
libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" function calls in the "lexer's memory clean-up procedure."
Exploits (1)
This PoC exploits a memory corruption vulnerability in libmimedir by crafting a malicious VCF file with NULL bytes to manipulate free() calls during lexer cleanup, potentially leading to arbitrary code execution.