Microsoft Windows Command Line cmd.exe stack-based overflow

Summaryinfo

A vulnerability labeled as critical has been found in Microsoft Windows. The affected element is an unknown function of the file cmd.exe of the component Command Line. Such manipulation leads to stack-based overflow. The attack may be performed from remote. In addition, an exploit is available. You should disable the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Microsoft Windows (Operating System) (the affected version unknown). Affected by this issue is an unknown part of the file cmd.exe of the component Command Line. The manipulation with an unknown input leads to a stack-based overflow vulnerability. Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). Impacted is confidentiality, integrity, and availability.

The weakness was presented 09/16/2021 by John Page. The advisory is available at hyp3rlinx.altervista.org. Technical details as well as a public exploit are known.

The exploit is available at hyp3rlinx.altervista.org. It is declared as proof-of-concept. As 0-day the estimated underground price was around $25k-$100k.

The best possible mitigation is suggested to be disabling the affected component.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #20781: Windows NT Command-line Interpreter "cmd.exe" / Stack Buffer Overflow (by hyp3rlinx)

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion