abctab2ps Write_Heading Function ABC File Remote Buffer Overflow Vulnerability
BID:12026
Info
abctab2ps Write_Heading Function ABC File Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 12026 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Dec 15 2004 12:00AM |
| Credit: | Discovery is credited to Limin Wang. |
| Vulnerable: |
abctab2ps abctab2ps 1.6.3 |
| Not Vulnerable: |
abctab2ps abctab2ps 1.6.4 |
Discussion
abctab2ps Write_Heading Function ABC File Remote Buffer Overflow Vulnerability
abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
This vulnerability exists in the 'write_heading()' function.
An attacker can exploit this issue by crafting a malicious ABC file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
abctab2ps version 1.6.3 is reported prone to this vulnerability. It is likely that other versions are affected as well.
abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
This vulnerability exists in the 'write_heading()' function.
An attacker can exploit this issue by crafting a malicious ABC file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
abctab2ps version 1.6.3 is reported prone to this vulnerability. It is likely that other versions are affected as well.
Exploit / POC
abctab2ps Write_Heading Function ABC File Remote Buffer Overflow Vulnerability
A proof of concept example is available:
A proof of concept example is available:
Solution / Fix
abctab2ps Write_Heading Function ABC File Remote Buffer Overflow Vulnerability
Solution:
The vendor has released abctab2ps 1.6.4 to address this issue.
abctab2ps abctab2ps 1.6.3
Solution:
The vendor has released abctab2ps 1.6.4 to address this issue.
abctab2ps abctab2ps 1.6.3
-
abctab2ps abctab2ps 1.6.4
http://www.lautengesellschaft.de/cdmm/#Download
References
abctab2ps Write_Heading Function ABC File Remote Buffer Overflow Vulnerability
References:
References:
- [remote] [control] abctab2ps 1.6.3 ("D. J. Bernstein"
- abctab2ps Home Page (abctab2ps)