Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2022-28884

Description

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.

POC

Reference

No PoCs from references.

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/Team-BT5/WinAFL-RDP

- https://github.com/bacon-tomato-spaghetti/WinAFL-RDP

- https://github.com/googleprojectzero/winafl

- https://github.com/ssumachai/CS182-Project

- https://github.com/yrime/WinAflCustomMutate