CVE-2018-25224
HIGHPMS 0.42 Stack-Based Buffer Overflow via Configuration File
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25224. PoCs published by Juan Sacco.
AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in PMS 0.42, leveraging a ROP chain to execute '/bin/sh'. The payload is crafted to bypass NX by using return-oriented programming (ROP) gadgets to achieve arbitrary code execution.
Description
PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute shell commands via return-oriented programming gadgets.
Exploits (1)
This exploit demonstrates a stack-based buffer overflow in PMS 0.42, leveraging a ROP chain to execute '/bin/sh'. The payload is crafted to bypass NX by using return-oriented programming (ROP) gadgets to achieve arbitrary code execution.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H