xwpe 1.5.30a-2.1 Stack-based Buffer Overflow

xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying overly long input strings that exceed buffer boundaries. Attackers can craft malicious command-line arguments with 262 bytes of junk data followed by shellcode to overwrite the instruction pointer and achieve code execution or denial of service.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

跨界内存写

Xwpe 缓冲区错误漏洞

Xwpe是Xwpe公司的一个基于终端的文本编辑与集成开发环境工具。 Xwpe 1.5.30a-2.1及之前版本存在缓冲区错误漏洞，该漏洞源于栈缓冲区溢出，可能导致本地攻击者通过提供超长输入字符串执行任意代码或拒绝服务。

N/A

N/A