abctab2ps Trim_Title Function ABC File Remote Buffer Overflow Vulnerability
BID:12028
Info
abctab2ps Trim_Title Function ABC File Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 12028 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2004 12:00AM |
| Updated: | Dec 15 2004 12:00AM |
| Credit: | Discovery is credited to Limin Wang. |
| Vulnerable: |
abctab2ps abctab2ps 1.6.3 |
| Not Vulnerable: | |
Discussion
abctab2ps Trim_Title Function ABC File Remote Buffer Overflow Vulnerability
abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
This vulnerability exists in the 'trim_title()' function.
An attacker can exploit this issue by crafting a malicious ABC file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
abctab2ps version 1.6.3 is reported prone to this vulnerability. It is likely that other versions are affected as well.
abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that this issue can allow an attacker to gain unauthorized access to a computer in the context of the application.
This vulnerability exists in the 'trim_title()' function.
An attacker can exploit this issue by crafting a malicious ABC file that contains excessive string data, replacement memory addresses, and executable instructions to trigger this issue.
If a user obtains this file and processes it through the application, the attacker-supplied instructions may be executed on the vulnerable computer. It is reported that successful exploitation may result in a compromise in the context of the application.
abctab2ps version 1.6.3 is reported prone to this vulnerability. It is likely that other versions are affected as well.
Exploit / POC
abctab2ps Trim_Title Function ABC File Remote Buffer Overflow Vulnerability
A proof of concept example is available:
A proof of concept example is available:
Solution / Fix
abctab2ps Trim_Title Function ABC File Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
abctab2ps Trim_Title Function ABC File Remote Buffer Overflow Vulnerability
References:
References:
- [remote] [control] abctab2ps 1.6.3 ("D. J. Bernstein"
- abctab2ps Home Page (abctab2ps)