10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attac…
High CVSS 8.4
Summary
10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Lint boundary warnings (2)
The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://www.10-strike.com/lanstate/download.shtml -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://www.10-strike.com/products.shtml
Sources
- NVD DATABASE
Original Links
- https://www.10-strike.com/lanstate/download.shtml
- https://www.10-strike.com/products.shtml
- https://www.exploit-db.com/exploits/45086
- https://www.vulncheck.com/advisories/10-strike-lanstate-local-buffer-overflow-seh
Timeline
- nvd_ingest NVD