The Bat! Remote Buffer Overflow Vulnerability

Bugtraq ID:	16797
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 23 2006 12:00AM
Updated:	Feb 24 2006 07:22PM
Credit:	NSA Group is credited with the discovery of this vulnerability.
Vulnerable:	Rit Research Labs The Bat! 3.60.7
Not Vulnerable:

The Bat! Remote Buffer Overflow Vulnerability


The Bat! is prone to a remote buffer-overflow vulnerability. This issue is due to a failure in the application to perform proper bounds checking on user-supplied data before storing it in a finite-sized buffer.

An attacker can exploit this issue to control program flow and execute arbitrary attacker-supplied code in the context of the victim user running the affected application.

The Bat! Remote Buffer Overflow Vulnerability


Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

The Bat! Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

The Bat! Remote Buffer Overflow Vulnerability

References:

• NSAG-?198-23.02.2006 The Bat v. 3.60.07 (NSA Group)
  
• The Bat! Homepage (Ritlabs)
  
• NSAG-?198-23.02.2006 - The Bat! (NSA Group )