10-Strike Network Inventory Explorer Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in 10-Strike Network Inventory Explorer version 8.54. The issue resides in the registration key input field, where local attackers can execute arbitrary code by overwriting the structured exception handler. Exploitation involves crafting a malicious registration key string that includes 4188 bytes of padding followed by values targeting the SEH chain and shellcode. This crafted string can be pasted into the registration dialog, leading to code execution with the privileges of the application.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with application privileges.

Reproduction

To reproduce this vulnerability, open the registration key input dialog. Paste a crafted string that includes 4188 bytes of padding, followed by the SEH chain overwrite values and the shellcode payload. Once the malicious string is pasted, click 'OK' to trigger the buffer overflow and execute the injected code.