Description
Domain Quester Pro 6.02 contains a stack overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload targeting the 'Domain Name Keywords' input field to trigger an access violation and execute a bind shell on port 9999.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Internet-Soft | Domain Quester Pro | 6.02 | — |
References
- ExploitDB-47825 exploit
- Software Vendor Homepage product
- VulnCheck Advisory: Domain Quester Pro 6.02 - Stack Overflow (SEH) third-party-advisory