Posted by malvuln on Feb 23

Discovery / credits: Malvuln – (c) 2021
Original source:
Contact: malvuln13 () gmail com

Threat: Backdoor.Win32.Ketch.h
Vulnerability: Remote Stack Buffer Overflow (SEH)
Description: Ketch makes HTTP request to port 80 for a file named
script.dat, after process the server response of 1,612 bytes or more it
triggers an SEH buffer overflow.
Read More – Full Disclosure

By |2021-02-23T09:18:42-05:00February 23rd, 2021|