Description
A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.
Problem types
CWE-121 Stack-based Buffer Overflow
CWE-94 Improper Control of Generation of Code ('Code Injection')
Product status
0.150
Credits
Peter Kasza
References
raw.githubusercontent.com/...loits/windows/misc/achat_bof.rb
www.vulncheck.com/advisories/achat-seh-buffer-overflow
www.exploit-db.com/exploits/36056