packetstormsecurity.com
http://packetstormsecurity.com/files/166573/ALLMediaServer-1.6-Buffer-Overflow.html CVE-2022-28381
CRITICAL
ALLMediaServer 1.6 SEH Buffer Overflow
Record summary
CVE-2022-28381 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 repository PoC.
Description
Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932.
Description source: CVE List
Exploitation context
Proofs of concept
2Catalogued exploits
MetasploitALLMediaServer 1.6 SEH Buffer OverflowMetasploit exploitby Hejap Zairy Al-SharifNot analyzed1 file
Repository PoCs
GitHubDShankle/CVE-2022-28381_PoCRepository PoCby DShankleStars: 0Not analyzed2 files
References
3github.com
https://github.com/Matrix07ksa/ALLMediaServer-1.6-Buffer-Overflow nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-28381