Buffer Overflow in Aeon by Doxing Inc. Affects Local Users
CVE-2005-1019
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2005-1019?
A buffer overflow vulnerability exists in the getConfig function of Aeon, version 0.2a and earlier. This flaw allows local users to exploit a long HOME environment variable to gain elevated privileges. When the HOME variable exceeds the expected length, it overwrites adjacent memory in a way that can be manipulated to perform unauthorized actions, putting the system at risk of malicious exploitation. Proper management and validation of environment variables can mitigate this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.