Topic created on: March 27, 2006 08:43 CST by morphique .

I have discovered a stack overflow vulnerability in one of the database software package. But it's not a case of traditional stack overflow exploitation where I can overwrite return address in order to acheive the execution of payload. This is because buffer is allocated much lower than RA (return address) on the stack. In this case I am able to consistently overwrite a SE handler on the stack but not able to cause exception consitently to get the execution. I may cause exception when stack of thread is loaded at specific memory address. Stack of thread is loaded at that address once the process is restarted once or twice.
My exploit works fine but it's not very stable due to the fact that I only cause exception when process is restarted once or twice.
Do you know of any tool or techniques which may help me by going through different routes and detect condition where I may consitently cause an exception.

Cheers
Morph