CVE-2019-25626
HIGHRiver Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25626. PoCs published by Chris Au.
AI-analyzed exploit summary This is a functional local buffer overflow exploit for River Past Cam Do 3.7.6, leveraging a structured exception handler (SEH) overwrite to achieve arbitrary code execution (calc.exe). The exploit generates a malicious activation code file that triggers the vulnerability when pasted into the application.
Description
River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malicious activation code string. Attackers can craft a buffer containing 608 bytes of junk data followed by shellcode and SEH chain overwrite values to trigger code execution when the activation dialog processes the input.
Exploits (1)
This is a functional local buffer overflow exploit for River Past Cam Do 3.7.6, leveraging a structured exception handler (SEH) overwrite to achieve arbitrary code execution (calc.exe). The exploit generates a malicious activation code file that triggers the vulnerability when pasted into the application.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H