CVE-2018-25212
HIGHBoxoft wav-wma Converter 1.0 Local Buffer Overflow SEH
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25212. PoCs published by Achilles.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow vulnerability in Boxoft wav-wma Converter 1.0 via a malicious .wav file. It overwrites the SEH handler and executes a bind shellcode on port 4444.
Description
Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WAV files. Attackers can create a specially crafted WAV file with excessive data and ROP gadgets to overwrite the SEH chain and achieve code execution on Windows systems.
Exploits (1)
This exploit demonstrates a local buffer overflow vulnerability in Boxoft wav-wma Converter 1.0 via a malicious .wav file. It overwrites the SEH handler and executes a bind shellcode on port 4444.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H