Description
Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution with potential remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Parallaxis | Cuckoo Clock | 5.0 | — |
References
- ExploitDB-48087 exploit
- Vendor Homepage product
- VulnCheck Advisory: Cuckoo Clock 5.0 - Buffer Overflow third-party-advisory