Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 27/01/2015 Updated: 28/01/2015

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Buffer overflow in the Customize 35mm tab in Two Pilots Exif Pilot 4.7.2 allows remote malicious users to execute arbitrary code via a long string in the maker element in an XML file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
two pilots exif pilot 4.7.2

#!/usr/bin/env ruby # Exploit Title: Exif Pilot SEH Based Buffer Overflow # Version: version 472 # Download: wwwcolorpilotcom/load/exifexe # Tested on: Windows XP sp2 # Exploit Author: Osanda M Jayathissa # E-Mail: osanda[cat]unseenis =begin Click Tools > Options > Customize 35mm tab > Import > and choose "outputxml" T ...

CWE-119 http://www.exploit-db.com/exploits/35870 http://packetstormsecurity.com/files/130037/Exif-Pilot-4.7.2-Buffer-Overflow.html https://nvd.nist.gov https://www.exploit-db.com/exploits/35870/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-1362

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect