DXFScope Remote Client-Side Buffer Overflow Vulnerability
BID:11986
Info
DXFScope Remote Client-Side Buffer Overflow Vulnerability
| Bugtraq ID: | 11986 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2004 12:00AM |
| Updated: | Dec 16 2004 12:00AM |
| Credit: | Ariel Berkman is credited with the discovery of this issue. |
| Vulnerable: |
DXFscope DXF file format viewer 0.2 |
| Not Vulnerable: | |
Discussion
DXFScope Remote Client-Side Buffer Overflow Vulnerability
A remote, client-side buffer overflow vulnerability reportedly affects the DXFscope utility. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it as the format specifier string in a formatted printing function.
An attacker may leverage this issue to execute arbitrary code with the privileges on an unsuspecting user that uses the vulnerable application to process a malicious DXF formatted file. This may facilitate unauthorized access or privilege escalation.
A remote, client-side buffer overflow vulnerability reportedly affects the DXFscope utility. This issue is due to a failure of the application to properly sanitize user-supplied input prior to using it as the format specifier string in a formatted printing function.
An attacker may leverage this issue to execute arbitrary code with the privileges on an unsuspecting user that uses the vulnerable application to process a malicious DXF formatted file. This may facilitate unauthorized access or privilege escalation.
Exploit / POC
DXFScope Remote Client-Side Buffer Overflow Vulnerability
The following proof of concept exploit has been made available. Reportedly, when parsed by the affected application, creates a file titled 'x' in the current working directory. This proof of concept has not been verified by Symantec.
The following proof of concept exploit has been made available. Reportedly, when parsed by the affected application, creates a file titled 'x' in the current working directory. This proof of concept has not been verified by Symantec.
Solution / Fix
DXFScope Remote Client-Side Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
DXFScope Remote Client-Side Buffer Overflow Vulnerability
References:
References:
- [remote] [control] dxfscope 0.2 overflows ent_name buffer ("D. J. Bernstein"
- DXFscope Home Page (DXFscope)