O3Read HTML Parser Buffer Overflow Vulnerability

Bugtraq ID:	12000
Class:	Boundary Condition Error
CVE:	CVE-2004-1288
Remote:	Yes
Local:	No
Published:	Dec 17 2004 12:00AM
Updated:	Jul 12 2009 09:26AM
Credit:	Discovery is credited to Wiktor Kopec.
Vulnerable:	Siag o3read 0.0.3 + Gentoo Linux
Not Vulnerable:	Siag o3read 0.0.4

O3Read HTML Parser Buffer Overflow Vulnerability

o3read is prone to a buffer overflow vulnerability. This issue is exposed when the program parses HTML content during file format conversion. This issue is considered to be remote in nature since it is possible that files may originate from an external or untrusted source.

Successful exploitation will result in code execution with the privileges of the user running the application.

O3Read HTML Parser Buffer Overflow Vulnerability

The following exploit example has been published:

• /data/vulnerabilities/exploits/58.xml.zip

O3Read HTML Parser Buffer Overflow Vulnerability

Solution:
Gentoo has released an advisory to provide updates for this issue. Updates may be applied by running the following commands as the superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=app-text/o3read-0.0.4"

This issue has been addressed in o3read 0.0.4.


Siag o3read 0.0.3

• Siag o3read-0.0.4.tar.gz
  http://siag.nu/pub/o3read/o3read-0.0.4.tar.gz

O3Read HTML Parser Buffer Overflow Vulnerability

References:

• [remote] [control] o3read 0.0.3 parse_html overflows t buffer ("D. J. Bernstein" )
  
• o3read Homepage (Siag)