CVE-2015-3205

#!/usr/bin/python # libmimedir-freepy # # Libmimedir VCF Memory Corruption PoC (CVE-2015-3205) # # Jeremy Brown [jbrown3264/gmail] # June 2015 # # -Synopsis- # # Adding two NULL bytes to the end of a VCF file allows a user to manipulate free() calls # which occur during it's lexer's memory clean-up procedure This could lead to exploitable # condi ...

Libmimedir suffers from a memory corruption vulnerability Adding two NULL bytes to the end of a VCF file allows a user to manipulate free() calls which occur during it's lexer's memory clean-up procedure This could lead to exploitable conditions such as crafting a specific memory chunk to allow for arbitrary code execution ...