EBay Enhanced Picture Service ActiveX Remote Buffer Overflow Vulnerability
BID:18921
Info
EBay Enhanced Picture Service ActiveX Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 18921 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2006-1176 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 06 2006 12:00AM |
| Updated: | Feb 20 2007 08:56PM |
| Credit: | Will Dormann is credited with the discovery of this vulnerability. |
| Vulnerable: |
eBay Enhanced Picture Services ActiveX control 1.0.3 36 |
| Not Vulnerable: |
eBay Enhanced Picture Services ActiveX control 1.0.3 48 |
Discussion
EBay Enhanced Picture Service ActiveX Remote Buffer Overflow Vulnerability
eBay Enhanced Picture Service ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
An attacker could exploit this issue by creating a malicious web page that would initialize the ActiveX controller and execute arbitrary code within the context of the user.
This issue could allow an attacker to execute arbitrary code.
This issue affects versions 1.0.3.36 and prior.
eBay Enhanced Picture Service ActiveX control is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
An attacker could exploit this issue by creating a malicious web page that would initialize the ActiveX controller and execute arbitrary code within the context of the user.
This issue could allow an attacker to execute arbitrary code.
This issue affects versions 1.0.3.36 and prior.
Exploit / POC
EBay Enhanced Picture Service ActiveX Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
EBay Enhanced Picture Service ActiveX Remote Buffer Overflow Vulnerability
Solution:
The vendor has released version 1.0.3.48 to address this issue. Please refer to the product's home page for more details.
Solution:
The vendor has released version 1.0.3.48 to address this issue. Please refer to the product's home page for more details.
References
EBay Enhanced Picture Service ActiveX Remote Buffer Overflow Vulnerability
References:
References:
- eBay Picture Manager Home Page (eBay)
- Vulnerability Note VU#597721 (US-CERT)