CVE-2017-17099
HIGHFlexense SyncBreeze Enterprise <10.1.16 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-17099. PoCs published by wetw0rk.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated SEH-based buffer overflow in SyncBreeze Enterprise v10.1.16 via a maliciously crafted GET request. It overwrites the SEH record with a POP,POP,RET pointer from libspp.dll and executes arbitrary code under the NT AUTHORITY\SYSTEM account.
Description
There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under the Windows SYSTEM account.
Exploits (2)
This Metasploit module exploits an unauthenticated SEH-based buffer overflow in SyncBreeze Enterprise v10.1.16 via a maliciously crafted GET request. It overwrites the SEH record with a POP,POP,RET pointer from libspp.dll and executes arbitrary code under the NT AUTHORITY\SYSTEM account.
This repository contains functional exploit code for CVE-2016-10709, targeting the HackSys Extreme Vulnerable Driver (HEVD) with a stack overflow vulnerability. The exploit includes shellcode for token stealing and privilege escalation on Windows 10 x64 systems.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H