CVE-2024-45870 PoC — Bandisoft BandiView 安全漏洞

Description

CVE-2024-45870, CVE-2024-45871, CVE-2024-45872 | Bandiview 7.05 Vuln PoC

介绍

# Bandiview-7.05-Vuln-PoC
We tried fuzzing against Bandiview-7.05 and were able to find a few vulnerabilities.

- [CVE-2024-45870](https://nvd.nist.gov/vuln/detail/CVE-2024-45870) ( JXR File Parsing DoS Vulnerability )
- [CVE-2024-45871](https://nvd.nist.gov/vuln/detail/CVE-2024-45871) ( PSD File Parsing DoS Vulnerability )
- [CVE-2024-45872](https://nvd.nist.gov/vuln/detail/CVE-2024-45872) ( PSD File Parsing Stack Buffer Overflow )

### Details
- Software: [BandiView](https://kr.bandisoft.com/bandiview/)
- Version: v7.05 (2024/7/15, BuildNo=26122)

### Credit
- JaeHo Cho ( @Jaecho6053 )
- SongHyun Bae ( @bshyuunn )
- JunSeo Bae ( @V0xe1 )
- LeeDong Ha ( @GAP-dev )

文件快照

备注