جزئیات آسیب‌پذیری

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution with potential remote code execution.

• https://www.exploit-db.com/exploits/48087 exploit
• https://en.softonic.com/author/pxcompany product
• https://www.vulncheck.com/advisories/cuckoo-clock-buffer-overflow third-party-advisory