forked from liquidworm/advisory
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ZSL-2010-4929
42 lines (23 loc) · 1.2 KB
/
ZSL-2010-4929
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
-----------------------------------------------------------------------------------
Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability
Summary: Deimos Kasa is a Windows restaurant management software.
Desc: Deimos Kasa is prone to an integer overflow vulnerability because
it fails to perform adequate boundary checks on user-supplied input
in the table field. Successfully exploiting these issues may allow
local attackers to execute arbitrary code in the context of the
application. Failed exploit attempts will cause denial-of-service
conditions.
Product web page: http://www.planet.com.mk
Vendor: Planet Interactive DOO
Version Affected: 2.22.0.0, 2.49.0.0, 2.55.0.0 and 2.58.0.0
Tested on Microsoft Windows XP Professional SP2 (English)
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
liquidworm gmail com
Zero Science Lab - http://www.zeroscience.mk
12.12.2009
Advisory: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4929.php
-----------------------------------------------------------------------------------
PoC:
The issue can be triggered by entering 10+ integers in the Table field (no pass needed).
Masa field: 1111111111 [ENTER]
//EOF