Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25330. PoCs published by Chris Inzinga.
AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in SurfOffline Professional 2.2.0.103 by overwriting the SEH (Structured Exception Handler) via a crafted 'Project Name' input. The payload consists of a buffer overflow with a pattern of 'A's, 'B's, and 'C's to trigger the crash.
Description
SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows attackers to crash the application by manipulating the project name input. Attackers can generate a malicious payload of 382 'A' characters followed by specific byte sequences to trigger a denial of service condition and overwrite SEH registers.
Exploits (1)
This exploit demonstrates a Denial of Service (DoS) vulnerability in SurfOffline Professional 2.2.0.103 by overwriting the SEH (Structured Exception Handler) via a crafted 'Project Name' input. The payload consists of a buffer overflow with a pattern of 'A's, 'B's, and 'C's to trigger the crash.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H