Description
10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 10-Strike Software | Network Inventory Explorer | 8.65 | — |
References
- ExploitDB-49134 exploit
- 10-Strike Network Inventory Explorer Vendor Homepage product
- VulnCheck Advisory: 10-Strike Network Inventory Explorer 8.65 - Buffer Overflow (SEH) third-party-advisory