Description (CNA)
SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Nsasoft / Nsauditor SpotAuditor | affected 5.3.2 |
CWE
CWE-121
References
- https://www.exploit-db.com/exploits/47759
- http://www.nsauditor.com/
- https://www.exploit-db.com/exploits/47719
- https://www.vulncheck.com/advisories/spotauditor-base-local-buffer-overflow-seh
ADP enrichment
No English description supplied.
No references supplied.