CVE-2019-16724

EPSS 72.2%

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.

Affected products

n/a · n/a

public PoCs found — 4

githubgithub.com/nanabingies/CVE-2019-16724★ 2 cve_referencepacketstormsecurity.com/files/154586/File-Sharing-Wizard-1.5.0-SEH-Buffer-Overflow.htmlunverified cve_referencepacketstormsecurity.com/files/154777/File-Sharing-Wizard-1.5.0-POST-SEH-Overflow.htmlunverified cve_referencewww.exploit-db.com/exploits/47412unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/154586/File-Sharing-Wizard-1.5.0-SEH-Buffer-Overflow.html http://packetstormsecurity.com/files/154777/File-Sharing-Wizard-1.5.0-POST-SEH-Overflow.html https://www.exploit-db.com/exploits/47412