@media(max-width:760px){.site-header{position:static;height:auto}.nav-shell{flex-wrap:wrap;height:auto;padding:12px 0}.nav-toggle{display:none}.nav-panel{position:static;display:flex;flex:0 0 100%;padding:10px 0 0;border:0;box-shadow:none}.nav-links a{min-height:42px}}

Public exploit · Metasploit Module

eSignal and eSignal Pro File Parsing Buffer Overflow in QUO

Published 06 September 2011Rocco Calvi

Exploit summary

eSignal and eSignal Pro versions 10.6.2425.1208 and earlier are unable to safely handle QUO, SUM and POR files. The vulnerability allows arbitrary code execution through a specially crafted file. Exploitation uses an egghunter technique and may take several seconds.

Source & references

Rapid7 Module