CVE-2019-25634
HIGHBase64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25634. PoCs published by Paolo Perego.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow (SEH) in Base64 Decoder 1.1.2, leveraging an egghunter and reverse shell payload to achieve remote code execution. The payload is crafted to bypass bad characters and trigger the vulnerability via a maliciously formatted file.
Description
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-RET gadget address, and uses an egghunter payload to locate and execute shellcode for code execution.
Exploits (1)
This exploit demonstrates a local buffer overflow (SEH) in Base64 Decoder 1.1.2, leveraging an egghunter and reverse shell payload to achieve remote code execution. The payload is crafted to bypass bad characters and trigger the vulnerability via a maliciously formatted file.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H