A local buffer overflow vulnerability in Ashkon Software Simple Startup Manager 1.17 allows for arbitrary code execution, posing a critical risk to system integrity.

This is a local buffer overflow (CWE-787) occurring within the File input parameter. An unauthenticated local attacker can provide a specifically crafted payload to overwrite memory and achieve arbitrary code execution.

The ability to execute arbitrary code locally allows an attacker to gain full control over the affected system. This may lead to the total compromise of sensitive data, unauthorized access to internal resources, or the installation of malicious software such as ransomware. Given the CVSS score of 8.4, this vulnerability represents a high-severity risk that requires immediate attention to prevent local privilege escalation.

Immediate Action: There is no vendor patch currently available for this legacy software; users are strongly advised to uninstall Simple Startup Manager 1.17 immediately.

Proactive Monitoring: Security teams should monitor endpoint logs for suspicious process execution or unexpected attempts to spawn system utilities like calc.exe from unauthorized application processes.

Compensating Controls: Ensure that Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) are strictly enforced at the operating system level to hinder exploitation attempts.

Public Exploit Available: Yes, a functional proof-of-concept exploit is publicly available via the Exploit Database (EDB-ID 48678).

Due to the availability of a public proof-of-concept and the nature of the buffer overflow, this vulnerability poses a significant risk to any environment running the affected software. Organizations must prioritize the removal of this application from all systems. If removal is not possible, ensure that the application is restricted to non-privileged user contexts and that system-level security protections are fully enabled.