NRSS RSS Reader Stack Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack buffer overflow vulnerability has been identified in NRSS RSS Reader version 0.3.9-1. This vulnerability allows local attackers to execute arbitrary code by supplying an oversized argument to the -F parameter. Exploitation involves crafting a malicious input with 256 bytes of padding followed by a controlled EIP value to overwrite the return address, leading to unauthorized code execution.

Impact

Exploitation of this vulnerability results in a stack buffer overflow, allowing for arbitrary code execution with the privileges of the user running the NRSS RSS Reader.

Reproduction

The vulnerability can be reproduced by using NRSS RSS Reader version 0.3.9-1 on a Linux system. The exploit involves launching the application with the -F parameter, followed by a payload that includes 256 bytes of padding and a controlled EIP value. This can be automated with a script that generates the appropriate input and executes it via the command line.