PT-2019-14795 · Upredsun · File Sharing Wizard

X00Pwn · Published 2019-09-24 · Updated 2024-10-08 · CVE-2019-16724

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-16724

Affected Products

File Sharing Wizard

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/file_sharing_wizard_seh.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/154586/File-Sharing-Wizard-1.5.0-SEH-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/47412 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-16724 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16724 · Vendor Advisory
• https://t.me/cvenotify/97461 · Telegram Post
• https://t.me/cvenotify/9720 · Telegram Post
• http://packetstormsecurity.com/files/154777/File-Sharing-Wizard-1.5.0-POST-SEH-Overflow.html · Note