Picasm Error Generation Remote Buffer Overflow Vulnerability

Bugtraq ID:	13698
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 20 2005 12:00AM
Updated:	May 20 2005 12:00AM
Credit:	Discovery is credited to Shaun Colley <[email protected]>.
Vulnerable:	Picasm Picasm 1.12 b Picasm Picasm 1.10
Not Vulnerable:	Picasm Picasm 1.12 c

Picasm Error Generation Remote Buffer Overflow Vulnerability

Picasm is affected by a remote buffer overflow vulnerability.

An attacker can exploit this issue by supplying an excessive 'error' directive.

If successfully exploited, this issue can allow a remote attacker to gain access to the affected computer in the context of the user running the application.

Picasm 1.12b and prior versions are vulnerable to this issue.

Picasm Error Generation Remote Buffer Overflow Vulnerability

Exploit code is available:

• /data/vulnerabilities/exploits/picasm_exploit.c

Picasm Error Generation Remote Buffer Overflow Vulnerability

Solution:
The vendor has released Picasm 1.12c to address this issue.


Picasm Picasm 1.10

• Picasm picasm112c.tar.gz
  http://www.co.jyu.fi/~trossi/pic/picasm112c.tar.gz

Picasm Picasm 1.12 b

• Picasm picasm112c.tar.gz
  http://www.co.jyu.fi/~trossi/pic/picasm112c.tar.gz

Picasm Error Generation Remote Buffer Overflow Vulnerability

References:

• PIC microcontroller tools (Timo Rossi)
  
• picasm error handling stack overflow vulnerability (Shaun Colley )