Description
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search keywords field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BearshareOfficial | BearShare Lite | 5.1.0 – ≤ 5.2.5 | — |
References
- ExploitDB-48839 exploit
- Official BearShare Homepage product
- BearShare Lite 5.2.5 Download Page product
- VulnCheck Advisory: BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC) third-party-advisory