Description (CNA)
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| BearshareOfficial / BearShare Lite | affected 5.1.0 through 5.2.5 |
CWE
CWE-120
References
- https://www.exploit-db.com/exploits/48839
- http://www.bearshareofficial.com/
- http://www.oldversion.com.de/windows/bearshare-lite-5-2-5
- https://www.vulncheck.com/advisories/bearshare-lite-advanced-searchbuffer-overflow-in-poc
ADP enrichment
No English description supplied.