VMWare ActiveX Control Buffer Overflow Vulnerability
BID:19732
Info
VMWare ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 19732 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 18 2006 12:00AM |
| Updated: | Aug 31 2006 09:48PM |
| Credit: | Discovered by c0ntex of www.open-security.org. |
| Vulnerable: |
VMWare Workstation 5.5.1 |
| Not Vulnerable: | |
Discussion
VMWare ActiveX Control Buffer Overflow Vulnerability
An ActiveX control distributed with VMware is prone to a buffer-overflow vulnerability.
An attacker can trigger this issue by supplying large amounts of data to a finite buffer in an ActiveX component of VMware. A successful attack can corrupt memory and facilitate arbitrary code execution in the context of the vulnerable application.
VMware 5.5.1 is vulnerable to this issue; previous versions may be affected as well.
An ActiveX control distributed with VMware is prone to a buffer-overflow vulnerability.
An attacker can trigger this issue by supplying large amounts of data to a finite buffer in an ActiveX component of VMware. A successful attack can corrupt memory and facilitate arbitrary code execution in the context of the vulnerable application.
VMware 5.5.1 is vulnerable to this issue; previous versions may be affected as well.
Exploit / POC
VMWare ActiveX Control Buffer Overflow Vulnerability
Exploit code is available.
Exploit code is available.
Solution / Fix
VMWare ActiveX Control Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
VMWare ActiveX Control Buffer Overflow Vulnerability
References:
References: