Description
Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-RET gadget address, and uses an egghunter payload to locate and execute shellcode for code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 4Mhz | Base64 Decoder | 1.1.2 | — |
References
- ExploitDB-46625 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Base64 Decoder 1.1.2 Local Buffer Overflow SEH Egghunter third-party-advisory