CVE-2010-5299

MEDIO 6.8CVE-2010-5299 · Published 23/05/2014 · updated 16/06/2026

Package	Affected versions	Patched versions
microp microp_project	`= 0.1.1.1600`	No fix yet

Description

Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. NOTE: it has been reported that the overflow is in the lpFileName parameter of the CreateFileA function, but the overflow is probably caused by a separate, unnamed function.

References

osvdb.org/show/osvdb/73627
packetstormsecurity.com/files/125723/MicroP-0.1.1.1600-Buffer-Overflow.html · Exploit
exploit-db.com/exploits/14720 · Exploit
exploit-db.com/exploits/17502 · Exploit
exploit-db.com/exploits/32261 · Exploit
rapid7/metasploit-framework · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free