extract75-cve-2020-13995

Эксплойт перехвата потока управления для CVE-2020-13995 Сборка: root@kitploit: make Запуск: root@kitploit: make run Прогон в Mayhem: root@kitploit: docker tag extract75-cve-2020-13955 /extract75-cve-2020-13955 docker push /extract75-cve-2020-13955 mayhem run --image /extract75-cve-2020-13955 ...

CVE-2020-13995

U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable sBuffer leads to a Write-What-Where outcome. Writing beyond sBuffer will clobber most global variables until reaching a pointer such as DESinfo or imageinfo...