# Exploit Title: aSc Timetables 2017 input field buffer overflow and code execution # Date: 2017-01-12 # Exploit Author: Peter Baris # Exploit code: http://saptech-erp.com.au/resources/Timetables.zip # Exploit documentation: http://saptech-erp.com.au/resources/TimeTables_2017.pdf # Software Link: http://www.asctimetables.com/download/aScTimeTables.exe # Version: 1.0.0.1 # Tested on: Windows Server 2008 R2 x64, Windows 7 Pro x64, Windows Server 2012 R2 x64, Windows Server 2016 x64 POC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/41031.zip