critical9.3Public exploit code
CVE-2013-3928
Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via cra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Chasys Draw IES - Local Buffer Overflow (Metasploit)2013-08-15 · local · windows · Verified
Impact
Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jpchacha | Chasys Draw Ies | through 4.10.01 Versions 4.00.01, 4.01.01, 4.02.01, 4.03.02, 4.04.01 |
Weakness classification
References
- NVD record
- CVE.org record
- http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html
- http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html
- http://secunia.com/advisories/53773
- http://www.exploit-db.com/exploits/27609
- http://www.jpchacha.com/chasysdraw/help.php?file=history.htm
- http://www.securityfocus.com/bid/61463
- https://docs.google.com/file/d/0BzyiGAtMizMtSFF4ZWVCMHNVVGs/edit?usp=sharing
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86035
- http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html
- http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html
- http://secunia.com/advisories/53773
- http://www.exploit-db.com/exploits/27609
- http://www.jpchacha.com/chasysdraw/help.php?file=history.htm
- http://www.securityfocus.com/bid/61463
- https://docs.google.com/file/d/0BzyiGAtMizMtSFF4ZWVCMHNVVGs/edit?usp=sharing
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86035