Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter
Vulnerability Description
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-RET gadget address, and uses an egghunter payload to locate and execute shellcode for code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25634
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Paolo Perego - paolo@armoredcode.com
References
Affected Vendor
4Mhz
View all reports →