RADASM Stack Buffer Overflow

A program stack buffer overflow in the RADASM package can overwhelm the SEH linked list and modify the SEH table. Attackers can construct specific files and modify the SEH linked list to execute arbitrary programs.






Cause:


When processing the. RC file string, insufficient application space may cause stack buffer overflow. Drowned SEH linked list. Attackers can construct a specific. RC file and modify the SEH linked list to execute arbitrary programs. The analyzed version is 2.2.1.9, and the program is resed.exe. However, this vulnerability may involve FFFFFFFF and CCCCCCCC (0bh-12 H) of the Quasi poc program of RADASM, I have not written a vulnerability exploitation program here.Solution:Check the total length of the path and file name. Static Memory exceeds bytes!