Exploitation Summary
EIP tracks 1 public exploit for CVE-2017-8893. PoCs published by X-C3LL.
AI-analyzed exploit summary This PoC exploits a heap-based buffer overflow in AeroAdmin 4.1 by sending a maliciously crafted packet with a manipulated size value (0x1337) to trigger a crash via a `rep movsb` operation. The code demonstrates the vulnerability by connecting to the target and sending the exploit packet.
Description
AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet. This can cause a buffer overflow and denial of service.
Exploits (1)
This PoC exploits a heap-based buffer overflow in AeroAdmin 4.1 by sending a maliciously crafted packet with a manipulated size value (0x1337) to trigger a crash via a `rep movsb` operation. The code demonstrates the vulnerability by connecting to the target and sending the exploit packet.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H