aSc Timetables 2017 – Local Buffer Overflow - 体验盒子

作者： Peter Baris

日期： 2017-01-12

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

# Exploit Title: aSc Timetables 2017 input field buffer overflow and code execution

# Date: 2017-01-12

# Exploit Author: Peter Baris

# Exploit code: http://saptech-erp.com.au/resources/Timetables.zip

# Exploit documentation: http://saptech-erp.com.au/resources/TimeTables_2017.pdf

# Software Link: http://www.asctimetables.com/download/aScTimeTables.exe

# Version: 1.0.0.1

# Tested on: Windows Server 2008 R2 x64, Windows 7 Pro x64, Windows Server 2012 R2 x64, Windows Server 2016 x64

POC:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41031.zip