Advisories

BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)

Go Back
severity
none
date
Affecting
  • BacklinkSpeed 2.4

CWE
  • CWE-121 Stack-based Buffer Overflow
CVSS
0
CVSS V4 Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Credit
Saeed reza Zamanian
Description
BacklinkSpeed 2.4 contains a buffer overflow vulnerability that allows attackers to corrupt the Structured Exception Handler (SEH) chain through malicious file import. Attackers can craft a specially designed payload file to overwrite SEH addresses, potentially executing arbitrary code and gaining control of the application.