9.3
CVSSv2

CVE-2013-4988

Published: 13/12/2013 Updated: 07/06/2021
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 940
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Stack-based buffer overflow in IcoFX 2.5 and previous versions allows remote malicious users to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details are obtained from third party information.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

icofx icofx 2.1

icofx icofx 2.0

icofx icofx 2.3

icofx icofx 2.2

icofx icofx 1.6

icofx icofx 1.6.4

icofx icofx 1.6.3

icofx icofx

icofx icofx 2.4

icofx icofx 1.6.2

icofx icofx 1.6.1

Exploits

IcoFX version 26 ico buffer overflow exploit with SEH and DEP bypass using JOP ...
Core Security - Corelabs Advisory corelabscoresecuritycom/ IcoFX Buffer Overflow Vulnerability PoC: githubcom/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/30208zip 1 *Advisory Information* Title: IcoFX Buffer Overflow Vulnerability Advisory ID: CORE-2013-1107 Advisory URL: wwwcoresecuritycom/advis ...
## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT def initialize(info = {}) super(update_info(info, 'Name' => 'Ic ...