CVE-2019-25336

Description

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.

Weakness classification

• CWE-121: Stack-based Buffer Overflow

Primary references

• disclosure@vulncheck.com — Product
• disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
• disclosure@vulncheck.com — Exploit, Third Party Advisory, VDB Entry
• disclosure@vulncheck.com — Broken Link