extract75-cve-2020-13995

Exploit de Secuestro de Flujo de Control para CVE-2020-13995 Compilar: root@kitploit: make Ejecutar: root@kitploit: make run Mayhem: root@kitploit: docker tag extract75-cve-2020-13955 /extract75-cve-2020-13955 docker push /extract75-cve-2020-13955 mayhem run --image /extract75-cve-2020-13955 ...

CVE-2020-13995

CVE-2020-13995 affects the U.S. Air Force Sensor Data Management System extract75. The issue is a buffer overflow in a global variable (sBuffer) that can lead to a Write-What-Where condition. Writing beyond sBuffer can clobber global variables until reaching pointers like DES_info or image_info; ...