Description (CNA)
A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Achat Software / Achat Chat Server | affected 0.150 |
CWE
CWE-121, CWE-94
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/achat_bof.rb
- https://www.vulncheck.com/advisories/achat-seh-buffer-overflow
- https://www.exploit-db.com/exploits/36056
ADP enrichment
No English description supplied.
No references supplied.