I have a crash that is exploitable, the information is this:

  Exploitability Classification: EXPLOITABLE
    Recommended Bug Title: Exploitable - User Mode Write AV starting at myfunction!mycomponet+0x0000000000018204 (Hash=0xad0842a8.0x0as0d4ca)

User mode write access violations that are not near NULL are exploitable.

I only have experience on stack overflow, and here don't see eip overwrite.

I know that fault, is when pass to vulnerable function a value greater than 80000001, the crash occurs.

But I don't know which type of vulnerability is it, heap overflow, integer, format string , command injection etc..

My question, with the exploitable response indicate the vulnerabilities ??? I don't understand the exploitable response.

Any suggestion or indication ?

Sorry for my newbie question, I am a beginner in exploiting.

1 Answer 1


It was classified as exploitable because it's a write access-violation to a non-null address. In theory, an attacker may be able to exploit this vulnerability to write arbitrary code to an arbitrary address.

  • Yes, thanks, but how exploit it? which vuln is? need learn about this vuln, I don't know. Thanks for your time and fast response Jason Geffner :-)
    – spider-45
    Commented Jan 23, 2014 at 18:51
  • 1
    That's a different question. Best to start a new one. Commented Jan 23, 2014 at 18:54
  • @spider-45 A vulnerability does not need to turn into code execution. If you can set specific variables you can also trigger vulnerabilities. Eg 'userid'
    – Stolas
    Commented Jan 24, 2014 at 8:31
  • Thanks for advice @Stolas, and Jason Geffner for corretions.
    – spider-45
    Commented Jan 24, 2014 at 17:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.