CVE-2019-25705— Echo Mirage 缓冲区错误漏洞

Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries and paste it into the action field through the Rules dialog to trigger the overflow and overwrite the return address.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

跨界内存写

Echo Mirage 缓冲区错误漏洞

Echo Mirage是abhi1299个人开发者的一个用于音频信号处理与回声效果模拟的软件工具。 Echo Mirage 3.1版本存在缓冲区错误漏洞，该漏洞源于对Rules操作字段的输入验证不足，可能导致栈缓冲区溢出和执行任意代码。

N/A

N/A