CVE-2017-15950
HIGHFlexense SyncBreeze Enterprise 10.1.16 - Buffer Overflow via Destination Directory Field
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-15950. PoCs published by Filipe Oliveira, rnnsz.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in SyncBreeze 10.1.16 via malformed XML input to achieve remote code execution. It uses a combination of stack pivoting and gadgets to redirect execution to a calc.exe payload.
Description
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.
Exploits (2)
This exploit leverages a stack-based buffer overflow in SyncBreeze 10.1.16 via malformed XML input to achieve remote code execution. It uses a combination of stack pivoting and gadgets to redirect execution to a calc.exe payload.
This repository contains a proof-of-concept exploit for CVE-2017-15950, a stack-based buffer overflow vulnerability in SyncBreeze. The exploit includes two Python scripts to generate payloads for either the XML parser or the Sync functionality, both designed to achieve remote code execution via shellcode.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H