Sandboxie-Plus, an open source sandbox isolation tool for Windows, contained a stack buffer overflow in the SbieIniServer RunSbieCtrl handler in versions prior to 1.17.3. The vulnerability arises because the MSGID_SBIE_INI_RUN_SBIE_CTRL message is handled before sandbox and impersonation checks, allowing non-sandboxed local processes to send an oversized payload. The handler copies this payload into a fixed-size WCHAR ctrlCmd[128] stack buffer using memcpy without verifying the payload length, leading to a stack overflow. The service pipe is created with a NULL DACL, permitting any local interactive process to connect and exploit this flaw. Successful exploitation can crash the SbieSvc service or enable code execution with SYSTEM privileges. The issue is addressed in Sandboxie-Plus version 1.17.3.

Exploitation of this vulnerability can cause the Sandboxie service (SbieSvc) to crash or allow an attacker to execute arbitrary code with SYSTEM privileges on the affected Windows system. This elevates the attacker's privileges locally, potentially compromising the host system's security.

This vulnerability is fixed in Sandboxie-Plus version 1.17.3. Users should upgrade to version 1.17.3 or later to remediate this issue. No other mitigation or temporary workaround is indicated in the available data.