Explorer32++ Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A buffer overflow vulnerability has been identified in Explorer32++ version 1.3.5.531. This vulnerability resides in the Structured Exception Handler (SEH) records, allowing attackers to execute arbitrary code. Exploitation involves providing a file name argument longer than 396 characters, which can corrupt the SEH chain and potentially execute malicious code.

Impact

Exploitation of this vulnerability can lead to arbitrary code execution on the affected system.

Reproduction

To reproduce this vulnerability, open Explorer32++.exe from the command line and provide a file name argument that exceeds 396 characters. The SEH chain will be corrupted, allowing for arbitrary code execution.