Description
10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application.
Problem types
Product status
Credits
absolomb
References
www.exploit-db.com/exploits/45086 (ExploitDB-45086)
www.10-strike.com/products.shtml (Official Product Homepage)
www.10-strike.com/lanstate/download.shtml (Product Reference)
www.vulncheck.com/…rike-lanstate-local-buffer-overflow-seh (VulnCheck Advisory: 10-Strike LANState 8.8 Local Buffer Overflow SEH)
