Crashmail Buffer Overflow Vulnerability Allowing Remote Code Execution

A stack-based buffer overflow vulnerability has been identified in Crashmail version 1.6. This vulnerability allows remote attackers to execute arbitrary code by sending malicious input to the application. Exploitation involves crafting payloads with Return-Oriented Programming (ROP) chains to achieve code execution within the application's context. However, unsuccessful exploitation attempts may lead to a denial-of-service condition.

Impact

Exploitation of this vulnerability could result in arbitrary code execution in the context of the application. However, failed exploitation attempts may cause a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a specially crafted input that exceeds the buffer's capacity, thereby overwriting the stack and allowing the execution of arbitrary code. This can be done using an exploit that incorporates a ROP chain to execute a command, such as launching a shell.