CVE-2017-9544
CRITICALEFS Software Easy Chat Server <3.1 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2017-9544.
PoCs published by Aitezaz Mohsin, adenkiewicz, Marco Rivoli, Aitezaz Mohsin, including Metasploit module exploits/windows/http/easychatserver_seh.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Easy Chat Server's registration page, leveraging an SEH overwrite to execute shellcode. The payload is delivered via a malformed HTTP POST request to the 'registresult.htm' endpoint.
Description
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.
Exploits (3)
This exploit targets a buffer overflow vulnerability in Easy Chat Server's registration page, leveraging an SEH overwrite to execute shellcode. The payload is delivered via a malformed HTTP POST request to the 'registresult.htm' endpoint.
This is a functional exploit for CVE-2017-9544, targeting a SEH-based buffer overflow in Easy Chat Server 3.1. It uses a reverse TCP shell payload generated via msfvenom to achieve remote code execution.
This Metasploit module exploits a buffer overflow vulnerability in Easy Chat Server during user registration via SEH overwrite. It sends a maliciously crafted POST request to trigger the overflow and execute arbitrary payloads.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H