Description
iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH records and execute shellcode with application privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Securimport | iSmartViewPro | 1.5 | — |
References
- ExploitDB-45349 exploit
- Product Reference product
- VulnCheck Advisory: iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter third-party-advisory