Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25615. PoCs published by Achilles.
AI-analyzed exploit summary This exploit leverages a local SEH overflow in Lavavo CD Ripper 4.20 by crafting a malicious payload that triggers a bind shell on port 3110. The payload includes a structured exception handler (SEH) bypass, NOP sled, and encoded shellcode generated via msfvenom.
Description
Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field. Attackers can craft a payload with controlled buffer data, NSEH jump instructions, and SEH handler addresses to trigger code execution and establish a bind shell on port 3110.
Exploits (1)
This exploit leverages a local SEH overflow in Lavavo CD Ripper 4.20 by crafting a malicious payload that triggers a bind shell on port 3110. The payload includes a structured exception handler (SEH) bypass, NOP sled, and encoded shellcode generated via msfvenom.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H