Description
iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH records and execute shellcode with application privileges.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
Credits
Gionathan "John" Reale
References
www.exploit-db.com/exploits/45349 (ExploitDB-45349)
securimport.com/.../software/493-software-ismartviewpro-v1-5 (Product Reference)
www.vulncheck.com/...-buffer-overflow-via-savepath-parameter (VulnCheck Advisory: iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter)