ESRI ArcPad APM File Processing Buffer Overflow Vulnerability

Bugtraq ID:	16136
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 04 2006 12:00AM
Updated:	Jan 04 2006 12:00AM
Credit:	bratax is credited with the discovery of this vulnerability.
Vulnerable:	ESRI ArcPad 7.0
Not Vulnerable:

ESRI ArcPad APM File Processing Buffer Overflow Vulnerability

ArcPad is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before copying it into an insufficiently sized memory buffer.

This issue allows an attacker to execute arbitrary machine code in the context of the user utilizing the affected application.

ESRI ArcPad APM File Processing Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ESRI ArcPad APM File Processing Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

ESRI ArcPad APM File Processing Buffer Overflow Vulnerability

References:

• ArcPad Homepage (ESRI)
  
• Security Advisory B007 - ESRI ArcPad 7 .apm File Processing Buffer Overflow Lets (bratax)