CVE-2019-25365
CRITICALChaosPro 2.0 - Stack-based Buffer Overflow in Configuration File Path Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25365. PoCs published by SYANiDE.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in ChaosPro 2.0, leveraging SEH overwrites to achieve remote code execution via a crafted 'PicturePath' in the configuration file. The payload includes a shellcode generated by msfvenom and uses arithmetic operations to dynamically compute target addresses.
Description
ChaosPro 2.0 contains a buffer overflow vulnerability in the configuration file path handling that allows attackers to execute arbitrary code by overwriting the Structured Exception Handler. Attackers can craft a malicious configuration file with carefully constructed payload to overwrite memory and gain remote code execution on vulnerable Windows XP systems.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in ChaosPro 2.0, leveraging SEH overwrites to achieve remote code execution via a crafted 'PicturePath' in the configuration file. The payload includes a shellcode generated by msfvenom and uses arithmetic operations to dynamically compute target addresses.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H