PT-2019-14795 · Upredsun · File Sharing Wizard

X00Pwn · Publicado 2019-09-24 · Atualizado 2024-10-08 · CVE-2019-16724

NVD

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2019-16724

Produtos afetados

File Sharing Wizard

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/file_sharing_wizard_seh.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/154586/File-Sharing-Wizard-1.5.0-SEH-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/47412 · Exploit
• https://t.me/cvenotify/97461 · Publicação no Telegram
• https://t.me/cvenotify/9720 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-16724 · Nota de Segurança
• http://packetstormsecurity.com/files/154777/File-Sharing-Wizard-1.5.0-POST-SEH-Overflow.html · Nota
• https://osv.dev/vulnerability/CVE-2019-16724 · Aviso do Fabricante