AutoVue SolidModel Professional Archive Multiple Remote Buffer Overflow Vulnerabilities
BID:19170
CVE-2006-3350 |Info
AutoVue SolidModel Professional Archive Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 19170 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2006-3350 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2006 12:00AM |
| Updated: | Jul 27 2006 07:27PM |
| Credit: | Tan Chew Keong, Secunia Research is credited with the discovery of this issue. |
| Vulnerable: |
Cimmetry Systems AutoVue SolidModel Professional 19.1 Build 5993 |
| Not Vulnerable: | |
Discussion
AutoVue SolidModel Professional Archive Multiple Remote Buffer Overflow Vulnerabilities
Multiple remotely exploitable client-side buffer-overflow vulnerabilities reportedly affect AutoVue SolidModel Professional. The application fails to properly validate the length of user-supplied strings before copying them into static process buffers.
An attacker may exploit these issues to execute arbitrary code with the privileges of the user that activated the vulnerable application. This may facilitate unauthorized access.
AutoVue SolidModel Professional Desktop Edition DEMO version 19.1 Build 5993 is reportedly vulnerable. Other versions may be affected as well.
Multiple remotely exploitable client-side buffer-overflow vulnerabilities reportedly affect AutoVue SolidModel Professional. The application fails to properly validate the length of user-supplied strings before copying them into static process buffers.
An attacker may exploit these issues to execute arbitrary code with the privileges of the user that activated the vulnerable application. This may facilitate unauthorized access.
AutoVue SolidModel Professional Desktop Edition DEMO version 19.1 Build 5993 is reportedly vulnerable. Other versions may be affected as well.
Exploit / POC
AutoVue SolidModel Professional Archive Multiple Remote Buffer Overflow Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
AutoVue SolidModel Professional Archive Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
AutoVue SolidModel Professional Archive Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- AutoVue SolidModel Professional (Cimmetry Systems)
- AutoVue SolidModel Professional Buffer Overflow Vulnerability (Secunia)