Cuckoo Clock 5.0 - Buffer Overflow

Vulnerability Description

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution with potential remote code execution.

References

• https://www.exploit-db.com/exploits/48087
• https://en.softonic.com/author/pxcompany
• https://www.vulncheck.com/advisories/cuckoo-clock-buffer-overflow