Advantech WebAccess Webvrpcs Service DrawSrv Untrusted Pointer Dereference Exploit

The specific flaw exists within the implementation of the 0x2723 opcode in the DrawSrv subsystem. A untrusted pointer dereference vulnerability exists previous to a call to memcpy. An attacker can use this vulnerability to execute arbitrary code in the context of an administrator of the system.