CVE-2020-37124
CRITICALB64dec 1.1.2 - Stack-based Buffer Overflow via Crafted Base64 Input
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37124. PoCs published by Andy Bowden.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in B64dec 1.1.2 via an SEH overflow combined with an egg hunter technique to execute arbitrary code (calc.exe). The payload is generated using msfvenom with shikata_ga_nai encoding.
Description
B64dec 1.1.2 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) with crafted input. Attackers can leverage an egg hunter technique and carefully constructed payload to inject and execute malicious code during base64 decoding process.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in B64dec 1.1.2 via an SEH overflow combined with an egg hunter technique to execute arbitrary code (calc.exe). The payload is generated using msfvenom with shikata_ga_nai encoding.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H