CVE-2019-25609
HIGHJetAudio jetCast Server 2.0 Local SEH Buffer Overflow
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25609. PoCs published by Connor McGarr.
AI-analyzed exploit summary This exploit demonstrates a local SEH-based buffer overflow in JetAudio jetCast Server 2.0 via the 'Log Directory' field. It uses alphanumeric-encoded shellcode to execute calc.exe by manipulating the stack and registers.
Description
JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuration field that allows local attackers to overwrite structured exception handling pointers. Attackers can inject alphanumeric encoded shellcode through the Log Directory field to trigger an SEH exception handler and execute arbitrary code with application privileges.
Exploits (1)
This exploit demonstrates a local SEH-based buffer overflow in JetAudio jetCast Server 2.0 via the 'Log Directory' field. It uses alphanumeric-encoded shellcode to execute calc.exe by manipulating the stack and registers.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H