Description
ChaosPro 2.0 contains a buffer overflow vulnerability in the configuration file path handling that allows attackers to execute arbitrary code by overwriting the Structured Exception Handler. Attackers can craft a malicious configuration file with carefully constructed payload to overwrite memory and gain remote code execution on vulnerable Windows XP systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Chaospro | ChaosPro | 2.0 | — |
References
- ExploitDB-47551 exploit
- Vendor Homepage product
- VulnCheck Advisory: ChaosPro 2.0 - Buffer Overflow third-party-advisory