Exploit Kaspersky AntiVirus - ThinApp Parser Stack Buffer Overflow

[Exploiter]

EDB-ID

38287

Проверка EDB

1. Пройдено

Автор

GOOGLE SECURITY RESEARCH

Тип уязвимости

LOCAL

Платформа

WINDOWS

CVE

null

Дата публикации

2015-09-22

Kaspersky AntiVirus - ThinApp Parser Stack Buffer Overflow

Source: https://code.google.com/p/google-security-research/issues/detail?id=518

A remotely exploitable stack buffer overflow in ThinApp container parsing. Kaspersky Antivirus (I've tested version 15 and 16) and other products using the Kaspersky Engine (such as ZoneAlarm) are affected.

Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38287.zip