Description
Buffer overflow in MostGear Soft Easy LAN Folder Share 3.2.0.100 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in the (1) registration code field in the activate license window or the (2) HKLM\SOFTWARE\MostGear\EasyLanFolderShare_V1\License registry key. NOTE: it is not clear from the original report whether this issue crosses privilege boundaries. If not, then it should not be included in CVE.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 2
- Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH) EDB-27316 · local · Aug 3, 2013 · verified
- Easy LAN Folder Share 3.2.0.100 - Buffer Overflow EDB-26214 · dos · Jun 14, 2013 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://packetstormsecurity.com/files/122677
- 26214 exploit
- 94390 vdb-entry
- 27316 exploit