cve/2013/CVE-2013-3928.md

CVE-2013-3928

Description

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.

POC

Reference

• http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html
• http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html
• http://www.exploit-db.com/exploits/27609

Github

No PoCs found on GitHub currently.