Sights 'N Sounds Streaming Media Server SWS.EXE Buffer Overflow Vulnerability

Bugtraq ID:	15809
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 12 2005 12:00AM
Updated:	Dec 12 2005 12:00AM
Credit:	dr_insane is credited with the discovery of this vulnerability.
Vulnerable:	Sights 'n Sounds Streaming Media Server 2.0.3 .b
Not Vulnerable:

Sights 'N Sounds Streaming Media Server SWS.EXE Buffer Overflow Vulnerability

Sights 'n Sounds Streaming Media Server is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

Successful exploitation will likely result in a crash of the 'SWS.exe' application, denying service to legitimate users. Arbitrary code execution may also be possible, this may facilitate privilege escalation to SYSTEM level.

Sights 'n Sounds Streaming Media Server version 2.0.3.b is affected.

Sights 'N Sounds Streaming Media Server SWS.EXE Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

An example URI has been provided:
http://www.example.com/MediaServerListing.exe?[long_string]

Sights 'N Sounds Streaming Media Server SWS.EXE Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sights 'N Sounds Streaming Media Server SWS.EXE Buffer Overflow Vulnerability

References:

• Sights 'n Sounds Streaming Media Server 2.0.3.a (InnovateWare)
  
• Sights 'n Sounds Streaming Media Server 2.0.3.a Buffer overflow (Ioannis Pomonis)