{"uuid": "2c9f83f9-14fc-4786-b629-c632d8c96e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-3928", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/chasys_draw_ies_bmp_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Christopher Gabriel\", \"Longinos Recuero Bustos\", \"Javier 'soez'\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a buffer overflow vulnerability found in Chasys Draw IES\\n          (version 4.10.01). The vulnerability exists in the module flt_BMP.dll, while\\n          parsing BMP files, where the ReadFile function is used to store user provided data\\n          on the stack in an insecure way. It results in arbitrary code execution under the\\n          context of the user viewing a specially crafted BMP file. This module has been\\n          tested successfully with Chasys Draw IES 4.10.01 on Windows XP SP3 and Windows 7\\n          SP1.\", \"disclosure_date\": \"2013-07-26\", \"fullname\": \"exploit/windows/fileformat/chasys_draw_ies_bmp_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Chasys Draw IES Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/chasys_draw_ies_bmp_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/chasys_draw_ies_bmp_bof\", \"references\": [\"CVE-2013-3928\", \"OSVDB-95689\", \"BID-61463\", \"URL-http://web.archive.org/web/20140326093457/http://secunia.com/advisories/53773/\", \"URL-http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Chasys Draw IES 4.10.01 / Windows XP SP3 / Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:22.349517Z"}