ImmuniWeb® by High-Tech Bridge


High-Tech Bridge Newsletter

Subscribe to our newsletter and receive some or all of our corporate news, invitations to security events or HTB Security Advisories – you choose what you want to receive.

Structured Exception Handler Exploitation

June 15, 2011

Author: Brian Mariani, Senior Security Auditor at High-Tech Bridge SA


The SEH exploitation technique was publicly documented by David Litchfield in September of 2003. At a high-level, the SEH overwrite technique uses a software vulnerability to execute arbitrary code by abusing the 32-bit exception dispatching facilities provided by Windows. At a functional level, an SEH overwrite is generally accomplished by using a stack-based buffer. This document explains SEH details while exploiting a real case.


PDF: Structured Exception Handler Exploitation (380 kB)
Video: Structured Exception Handler Exploitation