Star Office 5.1 Buffer Overflow Vulnerabilities
BID:1112
Info
Star Office 5.1 Buffer Overflow Vulnerabilities
| Bugtraq ID: | 1112 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2000-0291 |
| Remote: | No |
| Local: | No |
| Published: | Apr 16 2000 12:00AM |
| Updated: | Jul 11 2009 01:56AM |
| Credit: | This vulnerability was posted to the Bugtraq mailing list on April 16, 2000 by Michal Zalewski <[email protected]> |
| Vulnerable: |
Sun StarOffice 5.1 |
| Not Vulnerable: | |
Discussion
Star Office 5.1 Buffer Overflow Vulnerabilities
A number of buffer overflow vulnerabilities exist in Star Office 5.1, from Sun Microsystems. While an exact list of all the vulnerabilities present was not made available, a number of them seem to relate to URL code, in both HTML and Star Office native format. By supplying either html or a native document with a long URL, it is possible to cause Star Office to buffer overflow, due to an unchecked strcpy() taking place.
In order for this attack to be successful, a user would have to download either an html or Star Office document (although other formats, such as Word might work as well), and load it in to Star Office. The attacker would have embedded shellcode, in the form of a long URL, in to the document, and would be able to execute code as the user running Star Office.
A number of buffer overflow vulnerabilities exist in Star Office 5.1, from Sun Microsystems. While an exact list of all the vulnerabilities present was not made available, a number of them seem to relate to URL code, in both HTML and Star Office native format. By supplying either html or a native document with a long URL, it is possible to cause Star Office to buffer overflow, due to an unchecked strcpy() taking place.
In order for this attack to be successful, a user would have to download either an html or Star Office document (although other formats, such as Word might work as well), and load it in to Star Office. The attacker would have embedded shellcode, in the form of a long URL, in to the document, and would be able to execute code as the user running Star Office.
Exploit / POC
Star Office 5.1 Buffer Overflow Vulnerabilities
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Star Office 5.1 Buffer Overflow Vulnerabilities
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
Star Office 5.1 Buffer Overflow Vulnerabilities
References:
References: