Published: 23/05/2014 Updated: 30/06/2014

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 695

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote malicious users to execute arbitrary code via a crafted .mppl file. NOTE: it has been reported that the overflow is in the lpFileName parameter of the CreateFileA function, but the overflow is probably caused by a separate, unnamed function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microp project microp 0.1.1.1600

# Exploit Title: MicroP malicious MPPL Buffer Overflow # Date: 08/23/10 # Author: james [AT] learnsecurityonline [DOT] com # Software Link: sourceforgenet/projects/microp/ # Version: 0111600 # Tested on: Windows XP SP3 EN #! /usr/bin/evn ruby # windows/exec - 144 bytes # wwwmetasploitcom # Encoder: x86/shikata_ga_nai # EXITFU ...

#!/usr/bin/env ruby # Exploit Title:MicroP(mppl) Local Stack Based Buffer Overflow # Author:Necmettin COSKUN => twittercom/babayarisi # Blog : wwwncoskuncom wwwgrisapkaorg # Vendor :sourceforgenet/projects/microp/ # Software link:sourceforgenet/projects/microp/files/latest/download # version: 0111600 # Tes ...

## # $Id: microp_mpplrb 13114 2011-07-07 06:29:37Z sinn3r $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Me ...

CWE-119 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/microp_mppl.rb http://osvdb.org/show/osvdb/73627 http://www.exploit-db.com/exploits/32261 http://packetstormsecurity.com/files/125723/MicroP-0.1.1.1600-Buffer-Overflow.html http://www.exploit-db.com/exploits/14720 http://www.exploit-db.com/exploits/17502 https://nvd.nist.gov https://www.exploit-db.com/exploits/14720/

CVE-2010-5299

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect