← back
CVE-2014-2994

CVE-2014-2994

EPSS 26.2%
Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute).
Affected products
n/a · n/a
public PoCs found — 4
cve_referencepacketstormsecurity.com/files/126306/Acunetix-8-Stack-Buffer-Overflow.htmlunverifiedcve_referencepacketstormsecurity.com/files/126307/Acunetix-8-Scanner-Buffer-Overflow.htmlunverifiedcve_referencewww.exploit-db.com/exploits/32997unverifiedexploitdbwww.exploit-db.com/exploits/32997unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://an7isec.blogspot.co.il/2014/04/pown-noobs-acunetix-0day.htmlhttp://osandamalith.wordpress.com/2014/04/24/pwning-script-kiddies-acunetix-buffer-overflow/http://packetstormsecurity.com/files/126306/Acunetix-8-Stack-Buffer-Overflow.htmlhttp://packetstormsecurity.com/files/126307/Acunetix-8-Scanner-Buffer-Overflow.htmlhttps://www.youtube.com/watch?v=RHaMx8K1GeMhttp://www.acunetix.com/blog/news/misleading-reports-0-day-acunetix-wvs/http://www.exploit-db.com/exploits/32997