جزئیات آسیب‌پذیری

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering a structured exception handler overwrite. Attackers can craft a malicious registration key string with 4188 bytes of padding followed by SEH chain values and shellcode, then paste it into the registration dialog to achieve code execution with application privileges.

• https://www.exploit-db.com/exploits/44840 exploit
• https://www.10-strike.com/ product
• https://www.vulncheck.com/advisories/10-strike-network-inventory-explorer-buffer-overflow-seh third-party-advisory