CVE-2022-29465 PoC — Accusoft ImageGear 缓冲区错误漏洞

Source

https://github.com/badguy233/CVE-2022-29465

Associated Vulnerability

Title:Accusoft ImageGear 缓冲区错误漏洞 (CVE-2022-29465)
Description:Accusoft ImageGear是美国Accusoft公司的一款用于图像处理的软件开发工具包（SDK）。 Accusoft ImageGear 20.0 版本存在缓冲区错误漏洞，该漏洞源于PSD Header 处理内存分配功能中存在越界写入漏洞。特制的格式错误的文件可能会导致内存损坏。攻击者通过该漏洞可以使用恶意文件来触发此漏洞。

Description

CVE-2022-29464

Readme

# CVE-2022-29464

```
#go run main.go

请输入目标地址, 如 https://127.0.0.1

https://127.0.0.1:9443
```

*https://127.0.0.1:9443/authenticationendpoint/cmd.jsp?cmd=id*

File Snapshot


 [4.0K]  /data/pocs/48a8411bee792017d14c2eb82690e2ee7285739d
├── [1.5K]  main.go
├── [ 176]  README.md
└── [ 517]  shell.jsp

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!