{"uuid": "267f99fe-b386-4761-b2d1-4c5116788b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-3494", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/esignal_styletemplate_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Luigi Auriemma\", \"TecR0c \", \"mr_me \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"The software is unable to handle the \\\"\\\" files (even those\\n          original included in the program) like those with the registered\\n          extensions QUO, SUM and POR. Successful exploitation of this\\n          vulnerability may take up to several seconds due to the use of\\n          egghunter. Also, DEP bypass is unlikely due to the limited space for\\n          payload. This vulnerability affects versions 10.6.2425.1208 and earlier.\", \"disclosure_date\": \"2011-09-06\", \"fullname\": \"exploit/windows/fileformat/esignal_styletemplate_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"eSignal and eSignal Pro File Parsing Buffer Overflow in QUO\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/esignal_styletemplate_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/esignal_styletemplate_bof\", \"references\": [\"CVE-2011-3494\", \"OSVDB-75456\", \"BID-49600\", \"URL-http://aluigi.altervista.org/adv/esignal_1-adv.txt\", \"EDB-17837\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Win XP SP3 / Windows Vista / Windows 7\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:23.991322Z"}