9.3
CVSSv2

CVE-2008-5755

Published: 30/12/2008 Updated: 29/09/2017
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 940
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in IntelliTamper 2.07 and 2.08 allows remote malicious users to execute arbitrary code via a MAP file containing a long URL, possibly a related issue to CVE-2006-2494.

Vulnerable Product Search on Vulmon Subscribe to Product

intellitamper intellitamper 2.07

intellitamper intellitamper 2.08

Exploits

#!/usr/bin/python # IntelliTamper 207/208 (MAP File) 0-day Local SEH Overwrite Exploit # Bug discovered by cN4phux <cN4phux@gmailcom> # Tested on: IntelliTamper 207/208 / win32 SP3 FR # Shellcode: Windows Execute Command (calc) <metasploitcom> # Here's the debugger output like what u see, the EIP overwritten & attempt to read ...
#!/usr/bin/perl # k`sOSe - 7/21/2008 # secuniacom/advisories/20172 # A sploit for an ancient vuln Just because i need # to improve my skills on windows explotation use warnings; use strict; # CMD="c:\windows\system32\calcexe" # [*] x86/alpha_mixed succeeded, final size 345 # bad char -> \x89 my $shellcode = "\x54\x5a\xda\xd0\xd9\ ...