CVE-2018-6892

CloudMe Sync (v1.11.2) is affected by CVE-2018-6892: an unauthenticated attacker can connect to the Sync client on TCP port 8888 and trigger a buffer overflow that allows arbitrary code execution. Public exploits demonstrate SEH/ROP techniques (including DEP/ASLR bypass) against Windows targets. ...