Description
Atomic Alarm Clock 6.3 contains a stack overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string to the display name textbox in the Time Zones Clock configuration. Attackers can craft a buffer with structured exception handling overwrite and encoded shellcode to bypass SafeSEH protections and execute arbitrary commands with application privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Drive-software | Atomic Alarm Clock | 6.3 | — |
References
- ExploitDB-48346 exploit
- VulnCheck Advisory: Atomic Alarm Clock 6.3 Stack Overflow via SEH Unicode third-party-advisory