Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities

Bugtraq ID:	11412
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 14 2004 12:00AM
Updated:	Oct 14 2004 12:00AM
Credit:	Discovery is credited to John Bissell <[email protected]>.
Vulnerable:	Microsoft Internet Explorer 3.0.1 for Windows 95 - Microsoft Windows 95 - Microsoft Windows 95 Microsoft FrontPage 98 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Microsoft FrontPage 97
Not Vulnerable:

Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities

Microsoft Frontpage is reported prone to multiple remote denial of service vulnerabilities when handling malformed JPEG files. These issues exist due to insufficient verification performed by the 'asycpict.dll' module.

Reportedly, these issues can only cause a denial of service condition, however, it may be possible to execute arbitrary code on a vulnerable computer as well. This has not been confirmed at the moment.

It should be noted that in an initial advisory these vulnerabilities were reported to affect the 'asycpict.dll' library. In the report it is mentioned that this library is shipped with all versions of Microsoft Windows XP, however, conflicting reports indicate that this is not accurate. These conflicting reports indicate that this library is in fact shipped with Microsoft Front Page 97 and 98. Additionally, one of these reports indicated that the library was also shipped with Microsoft Internet Explorer version 3.01. This is not confirmed.

Due to a lack of details, further information is not available at the moment. This BID will be updated as more information becomes available.

Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities

Proof of concept may be found at the following locations:

http://thisisatestpage0.tripod.com/Page2.htm
http://thisisatestpage1.tripod.com/Page2.htm

Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities

References:

• FP97: Files and Folders Created during Setup (Microsoft)
  
• FP98: Files Installed by FrontPage 98 (Microsoft)
  
• New Remote Microsoft JPEG DoS Vulnerability (John Bissell )
  
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulne (SysAdminKC )
  
• Re: New Remote Microsoft JPEG DoS Vulnerability + Other Potential Security Vulne ("marco correnti" )