CVE-2019-25603
HIGHTuneClone 2.20 Structured Exception Handler Buffer Overflow
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25603. PoCs published by Achilles.
AI-analyzed exploit summary This exploit leverages a local SEH overflow in TuneClone 2.20 by crafting a malicious payload that triggers a bind shell on port 3110 when pasted into the 'Enter License Code' field. The payload includes a structured buffer overflow with NOP sleds, SEH bypass, and Shikata Ga Nai-encoded shellcode.
Description
TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license code string. Attackers can craft a payload with a controlled buffer, NSEH jump instruction, and SEH handler address pointing to a ROP gadget, then paste it into the license code field to trigger code execution and establish a bind shell.
Exploits (1)
This exploit leverages a local SEH overflow in TuneClone 2.20 by crafting a malicious payload that triggers a bind shell on port 3110 when pasted into the 'Enter License Code' field. The payload includes a structured buffer overflow with NOP sleds, SEH bypass, and Shikata Ga Nai-encoded shellcode.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H