CVE-2023-54334
CRITICALCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Tags
Description
Explorer32++ 1.3.5.531 contains a buffer overflow vulnerability in Structured Exception Handler (SEH) records that allows attackers to execute arbitrary code. Attackers can exploit the vulnerability by providing a long file name argument over 396 characters to corrupt the SEH chain and potentially execute malicious code.
Analysis
Explorer32++ 1.3.5.531 has a buffer overflow in filename handling that corrupts the SEH chain with filenames over 396 characters. PoC available.
Technical Context
Long filename arguments (>396 chars) overflow a buffer and corrupt SEH records (CWE-121).
Affected Products
Explorer32++ 1.3.5.531
Remediation
Avoid using this software until patched.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today