Cambridge Computer Corporation VxWeb Remote Buffer Overflow Vulnerability

Bugtraq ID:	14841
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 15 2005 12:00AM
Updated:	Sep 15 2005 12:00AM
Credit:	Discovery is credited to Seth Fogie.
Vulnerable:	Cambridge Computer Corporation vxWeb 1.1.4
Not Vulnerable:

Cambridge Computer Corporation VxWeb Remote Buffer Overflow Vulnerability

vxWeb is prone to a remote buffer overflow vulnerability.

A successful attack may trigger a crash in the server. This issue could lead to arbitrary code execution, however, this was not confirmed. If arbitrary code execution is possible, the attacker may gain unauthorized remote access in the context of the server application.

vxWeb 1.1.4 is reported to be affected by this issue. Other versions may also be vulnerable.

Cambridge Computer Corporation VxWeb Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cambridge Computer Corporation VxWeb Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cambridge Computer Corporation VxWeb Remote Buffer Overflow Vulnerability

References:

• vxWeb for Windows CE (Cambridge Computer Corporation)
  
• Airscanner Mobile Security Advisory #05081101: vxWeb v.1.1.4 ([email protected])