Description
Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
ProShow Gold v4.0.2549 (PSH File) Stack Buffer Overflow
exploit/windows/fileformat/proshow_cellimage_bof
Exploit-DB 3
- ProShow Gold 4.0.2549 - '.psh' Local Stack Buffer Overflow (Metasploit) EDB-16655 · local · Sep 25, 2010 · verified
- ProShow Producer / Gold 4.0.2549 - '.psh' Universal Buffer Overflow (SEH) EDB-9519 · local · Aug 25, 2009 · verified
- Photodex ProShow Gold 4 (Windows XP SP3) - '.psh' Universal Buffer Overflow (SEH) EDB-9483 · local · Aug 24, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20090820 [Bkis-11-2009] ProShow Gold Buffer Overflow Vulnerabilities mailing-list
- proshow-psh-bo(52606) vdb-entry
- http://blog.bkis.com/?p=737
- 36357 third-party-advisory
- 57226 vdb-entry