cve/2008/CVE-2008-5176.md

CVE-2008-5176

Description

Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.

POC

Reference

• http://aluigi.org/adv/wincomalpd-adv.txt
• http://aluigi.org/poc/wincomalpd.zip
• http://securityreason.com/securityalert/4610

Github

No PoCs found on GitHub currently.