Jef Moine abcm2ps ABC File Remote Buffer Overflow Vulnerability
BID:12022
Info
Jef Moine abcm2ps ABC File Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 12022 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Dec 15 2004 12:00AM |
| Credit: | Discovery is credited to Limin Wang. |
| Vulnerable: |
Jef Moine abcm2ps 3.7.20 |
| Not Vulnerable: |
Jef Moine abcm2ps 3.7.21 |
Discussion
Jef Moine abcm2ps ABC File Remote Buffer Overflow Vulnerability
abcm2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data into sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
An attacker can exploit this issue by crafting a malicious ABC file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
abcm2ps version 3.7.20 is reported prone to this vulnerability. It is likely that other versions are affected as well.
abcm2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data into sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
An attacker can exploit this issue by crafting a malicious ABC file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
abcm2ps version 3.7.20 is reported prone to this vulnerability. It is likely that other versions are affected as well.
Exploit / POC
Jef Moine abcm2ps ABC File Remote Buffer Overflow Vulnerability
A proof of concept example is available:
A proof of concept example is available:
Solution / Fix
Jef Moine abcm2ps ABC File Remote Buffer Overflow Vulnerability
Solution:
Gentoo has released an advisory to provide updates for this issue. Updates may be applied by running the following commands as the superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=media-sound/abcm2ps-3.7.21"
This issue has been addressed in version 3.7.21.
Jef Moine abcm2ps 3.7.20
Solution:
Gentoo has released an advisory to provide updates for this issue. Updates may be applied by running the following commands as the superuser:
emerge --sync
emerge --ask --oneshot --verbose ">=media-sound/abcm2ps-3.7.21"
This issue has been addressed in version 3.7.21.
Jef Moine abcm2ps 3.7.20
-
Jef Moine abcm2ps-3.7.21.tar.gz
http://moinejf.free.fr/abcm2ps-3.7.21.tar.gz
References
Jef Moine abcm2ps ABC File Remote Buffer Overflow Vulnerability
References:
References:
- [remote] [control] abcm2ps 3.7.20 put_words overflows str buffer ("D. J. Bernstein"
- abcm2ps Changelog (abcm2ps)
- abcm2ps Product Page (Jef Moine)