cve/2020/CVE-2020-28926.md

CVE-2020-28926

Description

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

POC

Reference

• https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/
• https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/lorsanta/exploit-CVE-2020-28926
• https://github.com/nomi-sec/PoC-in-GitHub