Boxoft WAV to MP3 Converter 1.1 - Buffer Overflow (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Boxoft WAV to MP3 Converter v1.1 Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter...

Boxoft WAV To MP3 Converter 1.1 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Boxoft WAV to MP3 Converter v1.1 Buffer Overflow", 'Description' = %q This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter...

Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow (SEH)

Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow SEH Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this...

Boxoft WAV To MP3 COnverter 1.1 Buffer Overflow

Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. category: Local Exploit f = open"malicious.aiff", "w"...

Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: email protected Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. categor...

Boxoft WAV to MP3 Converter 1.1 - Local Buffer Overflow (SEH)

Exploit Title: Boxoft WAV to MP3 Converter 1.1 - SEH Buffer Overflow Date: 10/13/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 1.1 Tested on: XP SP3 EN Description: A malicious .aiff file cause this vulnerability. category: Local Exploit f = open"malicious.aiff", "w"...

Buffer overflow

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

CVE-2015-7243

Boxoft WAV to MP3 Converter is affected by CVE-2015-7243, a stack/SEH-based buffer overflow in the WAV to MP3 conversion process for versions 1.0 and 1.1. A crafted WAV file can trigger a crash and potentially allow remote code execution. Exploit paths are documented (Exploit-DB/Metasploit module...

CVE-2015-7243: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted WAV file...

PT-2015-7489

Name of the Vulnerable Software and Affected Versions Boxoft WAV to MP3 Converter affected versions not specified Description A buffer overflow issue in the Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service, potentially leading to a crash, and possibly execute...

Boxoft WAV to MP3 Converter - convert 特性缓冲区溢出

首先拿到poc，先看看，明显的溢出，利用的是SEH的结构 !/usr/bin/python using=utf-8 f = open"malicious.aiff", "w" f.write"A"4132 f.write"\xeb\x06\x90\x90"nseh f.write"\xa4\x43\x40\x00"seh Shellcode: windows/exec - 277 bytes CMD=calc.exe f.write"\x90"20 f.write"\xba\xd5\x31\x08\x38\xdb\xcb\xd9\x74\x24\xf4\x5b\x29\xc9\xb1"...

Boxoft WAV To MP3 Converter Buffer Overflow

Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7 Enterprise x64 CVE: Category: Local Exploit Description: A...

Boxoft WAV to MP3 Converter - convert Local Buffer Overflow

Boxoft WAV to MP3 Converter - convert Local Buffer Overflow Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7...

Boxoft WAV to MP3 Converter - 'convert' Local Buffer Overflow

Exploit Title: Boxoft wav to mp3 converter SEH bypass technique tested on Win7x64 Date: 8-31-2015 Software Link: http://www.boxoft.com/wav-to-mp3/ Exploit Author: Robbie Corley Contact: [email protected] Website: Target: Windows 7 Enterprise x64 CVE: Category: Local Exploit Description: A...

Boxoft WAV to MP3 Converter v1.1 Buffer Overflow

This module exploits a stack buffer overflow in Boxoft WAV to MP3 Converter versions 1.0 and 1.1. By constructing a specially crafted WAV file and attempting to convert it to an MP3 file in the application, a buffer is overwritten, which allows for running shellcode. Module Options msf use...