SysGauge Pro Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A local buffer overflow vulnerability has been identified in SysGauge Pro version 4.6.12. This vulnerability exists in the Register function, where local attackers can overwrite the structured exception handler by providing a crafted unlock key. Exploitation involves injecting shellcode through the Unlock Key field during the registration process, which can then be executed with application privileges.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with the privileges of the application.

Reproduction

To reproduce this vulnerability, register a new account in SysGauge Pro 4.6.12. In the Customer Name field, enter a name such as 'falafel'. Then, paste the injected shellcode into the Unlock Key field and click 'Register'. The injected shellcode will be executed, demonstrating the buffer overflow vulnerability.