Open Movie Editor Local Buffer Overflow Vulnerability

Bugtraq ID:	19938
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Sep 09 2006 12:00AM
Updated:	Sep 11 2006 10:37PM
Credit:	qinx is credited with the discovery of this vulnerability.
Vulnerable:	Open Movie Editor Open Movie Editor 0.0.20060901
Not Vulnerable:

Open Movie Editor Local Buffer Overflow Vulnerability

Open Movie Editor is prone to a local buffer-overflow vulnerability because it fails to properly validate the size of attacker-supplied data before copying it into a finite-sized buffer.

The issue allows local attackers to execute arbitrary machine code in the context of a user running an application that is dynamically linked against the library. Failed exploit attempts will likely crash the application, denying service to legitimate users.

Open Movie Editor version 0.0.20060901 is vulnerable to this issue.

Open Movie Editor Local Buffer Overflow Vulnerability

Exploit code is available.

• /data/vulnerabilities/exploits/ome_local_bufferoverflow.txt

Open Movie Editor Local Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Open Movie Editor Local Buffer Overflow Vulnerability

References:

• Open Movie Editor Home Page (Open Movie Editor)