EUVD-2019-11342

Malware in sbrugna...

CVE-2019-20805

plxelf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PTDYNAMIC segment...

Integer overflow

plxelf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PTDYNAMIC segment...

CVE-2019-20805

plxelf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PTDYNAMIC segment...

CVE-2019-20805

The CVE-2019-20805 issue affects UPX (PackLinuxElf32/64: p_lx_elf.cpp) prior to 3.96, caused by an integer overflow during unpacking in a PT_DYNAMIC segment. Public documents describe a heap/string vulnerability surface through crafted input impacting UPX’s ELF packing logic, with the CVSS metric...

CVE-2019-20805

plxelf.cpp in UPX before 3.96 has an integer overflow during unpacking via crafted values in a PTDYNAMIC segment...

Through the ELF dynamic loading of the structure ROP chain Return-to-dl-resolve-the vulnerability warning-the black bar safety net

Play CTF game stick have know that PWN type of vulnerability topic will generally provide an executable program, and provide program run dynamically link the libc library. By the libc. so you can get the library function of the offset address, combined with the leak GOT the table in the libc...