A local buffer overflow vulnerability in Easy File Sharing Web Server 7.2 allows attackers to achieve arbitrary code execution by creating a malicious user account.

The application is susceptible to a local structured exception handling (SEH) buffer overflow. An attacker with the ability to create a new user account can provide a crafted username containing over 4000 bytes of padding and specific memory pointers to trigger an out-of-bounds write, leading to arbitrary code execution.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code with the privileges of the web server process. This could lead to full system compromise, data exfiltration, or unauthorized modification of system files. Given the CVSS score of 8.4, the risk is high, particularly in environments where multiple users share access to the administration interface.

Immediate Action: There is no official patch available for this legacy software; administrators should immediately restrict access to the user creation interface or decommission the service.

Proactive Monitoring: Monitor system logs for repeated application crashes or unusual process behavior associated with the web server executable. Review user account creation logs to identify any accounts created with abnormally long or irregular usernames.

Compensating Controls: Implement strict access control lists (ACLs) on the server to ensure only authorized personnel can access the application interface. Use endpoint detection and response (EDR) tools to monitor for unauthorized shell spawning from the web server process.

Public Exploit Available: Yes, a functional exploit script is available on Exploit-DB (EDB-ID: 47411).

This vulnerability poses a significant risk to the integrity and confidentiality of the host system. Given that the software appears to be unpatched and legacy, the most effective mitigation is to migrate to a supported and secure alternative. If migration is not immediately feasible, strictly isolate the server and limit administrative access to the smallest possible group of trusted users to minimize the attack surface.