CVE-2016-20048
HIGHiSelect 1.4.0-2+b1 Local Buffer Overflow via key parameter
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2016-20048. PoCs published by Juan Sacco.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in iSelect 1.4.0-2+b1 via the -k command-line argument, leveraging a NOP sled and shellcode to achieve arbitrary code execution. The exploit bypasses stack protections (without Fortify) and targets the strcpy_chk function.
Description
iSelect 1.4.0-2+b1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized value to the -k/--key parameter. Attackers can craft a malicious argument containing a NOP sled, shellcode, and return address to overflow a 1024-byte stack buffer and gain code execution with user privileges.
Exploits (1)
This exploit demonstrates a local buffer overflow in iSelect 1.4.0-2+b1 via the -k command-line argument, leveraging a NOP sled and shellcode to achieve arbitrary code execution. The exploit bypasses stack protections (without Fortify) and targets the strcpy_chk function.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H