CVE-2017-14627
HIGHCyberLink LabelPrint 2.5 - Stack-based Buffer Overflow via LPP Project File Parameters
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2017-14627.
PoCs published by Metasploit, f3ci, modpr0be <[email protected]>, f3ci <[email protected]>, including Metasploit module exploits/windows/fileformat/cyberlink_lpp_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 via a maliciously crafted .lpp file, leveraging SEH overwrites and Unicode-encoded shellcode to achieve remote code execution.
Description
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 via a maliciously crafted .lpp file, leveraging SEH overwrites and Unicode-encoded shellcode to achieve remote code execution.
This exploit targets a Unicode stack overflow vulnerability in CyberLink LabelPrint <=2.5. It generates a malicious .lpp file that triggers a buffer overflow, leading to arbitrary code execution via a bind shell payload.
This Metasploit module exploits a stack buffer overflow in CyberLink LabelPrint 2.5 via a maliciously crafted .lpp file, leveraging SEH overwrites and Unicode-aware shellcode to achieve remote code execution.
References (3)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H