CVE-2019-16724 PoC — File Sharing Wizard 缓冲区错误漏洞

Source

https://github.com/nanabingies/CVE-2019-16724

Associated Vulnerability

Title: File Sharing Wizard 缓冲区错误漏洞 (CVE-2019-16724)
Description:File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331.

Description

Exploit for CVE-2019-16724

Readme

# Vulnerability Description

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter. 

This exploit was tested on windows 7 Home. It will certainly break when on other platforms. Mainly for research purposes.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →