Michael Kohn VB2C FRM File Remote Buffer Overflow Vulnerability
BID:12020
Info
Michael Kohn VB2C FRM File Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 12020 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Dec 15 2004 12:00AM |
| Credit: | Discovery is credited to Qiao Zhang. |
| Vulnerable: |
Michael Kohn VB2C 0.02 |
| Not Vulnerable: | |
Discussion
Michael Kohn VB2C FRM File Remote Buffer Overflow Vulnerability
VB2C is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
An attacker can exploit this issue by crafting a malicious FRM file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
VB2C version 0.02 is reported prone to this vulnerability. It is likely that other versions are affected as well.
VB2C is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
An attacker can exploit this issue by crafting a malicious FRM file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
VB2C version 0.02 is reported prone to this vulnerability. It is likely that other versions are affected as well.
Exploit / POC
Michael Kohn VB2C FRM File Remote Buffer Overflow Vulnerability
A proof of concept example is available:
A proof of concept example is available:
Solution / Fix
Michael Kohn VB2C FRM File Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Michael Kohn VB2C FRM File Remote Buffer Overflow Vulnerability
References:
References:
- [remote] [control] vb2c 0.02 parse_sub overflows token buffer ("D. J. Bernstein"
- VB2C Product Page (Michael Kohn)