10-Strike Bandwidth Monitor Buffer Overflow Vulnerability Allowing Remote Code Execution

A buffer overflow vulnerability has been identified in 10-Strike Bandwidth Monitor version 3.9. This vulnerability allows attackers to bypass SafeSEH, ASLR, and DEP protections, leading to remote code execution. Exploitation involves sending a malicious payload to the application's registration key input, which is then executed as arbitrary system commands.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Reproduction

The vulnerability can be reproduced by enabling Data Execution Prevention (DEP) for all programs and services, except those selected. After installing 10-Strike Bandwidth Monitor 3.9, the application can be launched. The exploit involves copying a crafted buffer into the registration key input, which triggers the buffer overflow and executes the payload.