Yasr Screen Reader Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A buffer overflow vulnerability has been identified in Yasr Screen Reader version 0.6.9-5. This vulnerability allows local attackers to crash the application or execute arbitrary code by supplying an oversized argument to the '-p' parameter. Exploitation involves invoking Yasr with a crafted payload that includes junk data, shellcode, and a return address, overwriting the stack to trigger code execution.

Impact

Exploitation of this vulnerability can lead to a local denial-of-service condition or allow for arbitrary code execution with the privileges of the user running Yasr.

Reproduction

The vulnerability can be reproduced by using Yasr version 0.6.9-5 and supplying an oversized argument to the '-p' parameter. This can be done by including approximately 298 bytes of junk data followed by shellcode, NOP instructions, and a return address to overwrite the stack and execute arbitrary code.