Microchip MPLAB IDE MCP File Handling Remote Buffer Overflow Exploit

Microchip MPLAB contains a buffer prone to exploitation via an overly long string in the path of the project file. The vulnerability is caused due to a boundary error in Microchip MPLAB when handling .MCP files. This can be exploited to cause a stack-based buffer overflow via a specially crafted .MCP file. This module runs a malicious web server on the Core Impact Console and waits for an unsuspecting user to trigger the exploit by connecting to it.