CVE-2019-25650
HIGHRiver Past CamDo 3.7.6 Structured Exception Handler Buffer Overflow
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25650. PoCs published by Achilles.
AI-analyzed exploit summary This exploit leverages a structured exception handler (SEH) overflow in River Past CamDo 3.7.6 to achieve remote code execution via a crafted payload. The payload includes a bind shell on port 3110, triggered by pasting malicious input into the 'Lame_enc.dll' field in the application's options menu.
Description
River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lame_enc.dll name field. Attackers can craft a payload with a 280-byte buffer, NSEH jump instruction, and SEH handler address pointing to a pop-pop-ret gadget to trigger code execution and establish a bind shell on port 3110.
Exploits (1)
This exploit leverages a structured exception handler (SEH) overflow in River Past CamDo 3.7.6 to achieve remote code execution via a crafted payload. The payload includes a bind shell on port 3110, triggered by pasting malicious input into the 'Lame_enc.dll' field in the application's options menu.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H