#Storyboard quick format code

'EncoderType' => Msf::Encoder::Type::AlphanumMixed, This module exploits a stack-based buffer overflow in StoryBoard Quick 6.

#Storyboard quick format code

#29/11/11: Vulnerability advisory and exploit code published.Ĭlass Metasploit3 'StoryBoard Quick 6 Memory Corruption Vulnerability', #19/11/11: Vulnerability released at Ruxcon 2011 in Melbourne, Australia. #05/11/11: Vulnerability released at Kiwicon V in Wellington, New Zealand. #: A final email is sent stating that PowerProduction customers are vulnerable. #: sends a follow-up email stating that the vulnerability is still present. #No response was received from PowerProduction after this email. #: replies stating that this issue is exploitable without a customer number. #: After several attempts to get in contact, PowerProduction asks me for a customer number.

#: First email sent to PowerProduction, asking for contact details for security or developer #personnel. # practices responsible disclosure and made significant effort to report this #vulnerability to PowerProduction Software. This strcpy function overwrites a significant portion of the stack, including the Structured #Exception Handler. It is possible to write user-supplied data onto the stack #by changing the value of these 4 characters to a memory location containing a pointer to data within the #Frame.xml file. These four characters are used as a pointer #to the source address for a string copy function. #By crafting a file that contains more than 507 characters in the field, the StoryBoard Quick 6 #application will use the next 4 characters in an unsafe manner. Supplying a long file name causes memory corruption within the application. The element used to define a filename was found to be #vulnerable to a buffer overflow, which can be exploited to execute arbitrary code under the context of the #user running StoryBoard Quick 6. #Researcher: Nick Freeman has discovered a file format vulnerability in the XML files used to describe frames #in the StoryBoard Quick 6 software. #Affected Software: StoryBoard Quick 6 (potentially also StoryBoard Artist and StoryBoard Studio) #NameLStoryBoard Quick 6 Stack Buffer Overflow