CVE-2009-0812
published 2009-03-04CVE-2009-0812: Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute…
PriorityP345critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
6.90%
93.3th percentile
Stack-based buffer overflow in BreakPoint Software Hex Workshop 4.23, 6.0.1.4603, and other 6.x and earlier versions allows remote attackers to execute arbitrary code via a crafted Intel Hex Code (.hex) file. NOTE: some of these details are obtained from third party information.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bpsoft | hex_workshop | <= 6.0.0 | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
| bpsoft | hex_workshop | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Hex Workshop 4.23/5.1/6.0 - '.hex' Universal Local Buffer Overflow (SEH)
exploitdb·2009-08-31
CVE-2009-0812 Hex Workshop 4.23/5.1/6.0 - '.hex' Universal Local Buffer Overflow (SEH)
Hex Workshop 4.23/5.1/6.0 - '.hex' Universal Local Buffer Overflow (SEH)
---
#!/usr/bin/perl
# by hack4love
# [email protected]
# Hex Workshop v3//4//5//6 (.hex) Universal Local Buffer ExploitS (SEH)
# Found By: DATA_SNIPER
# http://www.bpsoft.com/downloads/
######################################################################################
##info:: i write 3 exploits for the 3 v
######################################################################################
# USE>>file>>import>>hack4love.hex>> boom calc
######################################################################################
#
#Hex Workshop v 3.11
#
######################################################################################
my $hed1=":0000FC...";
my $hed2="\n:";
my $bof="41" x 172;
my $nsh="EB06909
Exploit-DB
Hex Workshop 6.0 - '.hex' Local Code Execution
exploitdb·2009-02-27
CVE-2009-0812 Hex Workshop 6.0 - '.hex' Local Code Execution
Hex Workshop 6.0 - '.hex' Local Code Execution
---
#!/usr/bin/perl -w
# Hex Workshop >$fle") or die "Cannot open $data";
print $data $sploit;
close($data);
print "$fle has been created\n";
print "open it in HexWorkshop file->import.\n";
# milw0rm.com [2009-02-27]
No writeups or analysis indexed.
http://secunia.com/advisories/34021http://www.exploit-db.com/exploits/9550http://www.securityfocus.com/archive/1/501300/100/0/threadedhttp://www.securityfocus.com/bid/33932https://exchange.xforce.ibmcloud.com/vulnerabilities/48970https://www.exploit-db.com/exploits/8121http://secunia.com/advisories/34021http://www.exploit-db.com/exploits/9550http://www.securityfocus.com/archive/1/501300/100/0/threadedhttp://www.securityfocus.com/bid/33932https://exchange.xforce.ibmcloud.com/vulnerabilities/48970https://www.exploit-db.com/exploits/8121
2009-03-04
Published