Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-25259. PoCs published by bzyo.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Terminal Services Manager 3.1, leveraging SEH overwrite to achieve remote code execution. The payload is crafted to avoid bad characters and execute calc.exe via a structured buffer.
Description
Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that overwrite the SEH handler pointer to execute calc.exe or other payloads when imported through the add computers wizard.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in Terminal Services Manager 3.1, leveraging SEH overwrite to achieve remote code execution. The payload is crafted to avoid bad characters and execute calc.exe via a structured buffer.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H