Executive brief
Faleemi Desktop Software, used to manage and view security camera feeds, contains a security flaw in its configuration settings. A local attacker can exploit this by entering a specially crafted long string into the file path settings for snapshots and recordings. If successful, this allows the attacker to take full control of the computer, potentially leading to data theft or the installation of malicious software.
Technical details
A local buffer overflow vulnerability exists in Faleemi Desktop Software version 1.8.0 and earlier within the 'System Setup' dialog. The flaw is triggered when an overly long string is provided to the 'Save Path for Snapshot and Record file' input field, leading to an out-of-bounds write (CWE-787). Attackers can leverage Structured Exception Handling (SEH) overwrites and Return-Oriented Programming (ROP) chains to bypass Data Execution Prevention (DEP) protections. Successful exploitation allows for arbitrary code execution with the privileges of the application. While the attack is local, it does not require specific user privileges beyond the ability to interact with the application's configuration interface.
Affected products
- Faleemi Desktop Software 1.8.0 and earlier
Timeline
- 2019-01-26: other: Exploit code first authored
- 2019-01-28: disclosed: Exploit published on Exploit-DB
- 2026-04-12: advisory: CVE formally published/assigned via VulnCheck