Symantec Automated Support Assistant ActiveX Control Buffer Overflow Vulnerability

Bugtraq ID:	20348
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 05 2006 12:00AM
Updated:	Nov 13 2006 07:07PM
Credit:	Discovered by John Heasman of Next Generation Security Research.
Vulnerable:	Symantec Norton SystemWorks 2006 0 Symantec Norton SystemWorks 2005 0 Symantec Norton Internet Security 2006 0 Symantec Norton Internet Security 2005 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Symantec Automated Support Assistant 0
Not Vulnerable:

Symantec Automated Support Assistant ActiveX Control Buffer Overflow Vulnerability

An ActiveX control shipped with Symantec Automated Support Assistant and some other Symantec products is prone to a stack-based buffer-overflow vulnerability. This vulnerability requires a certain amount of user-interaction for an attack to occur, such as visiting a malicious website. A successful exploit would let a remote attacker execute code with the privileges of the currently logged-in user.

These products are shipped with the affected ActiveX control:

- Symantec Automated Support Assistant
- Symantec Norton AntiVirus
- Symantec Norton Internet Security
- Symantec Norton System Works

Note that the Symantec Automated Support Assistant is used by support to identify problems running any Symantec consumer-based products. Therefore, the affected control may be present on computers running other consumer products and versions as well. Symantec Corporate and Enterprise products are not affected, because they do not install the affected control.

Symantec Automated Support Assistant ActiveX Control Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Symantec Automated Support Assistant ActiveX Control Buffer Overflow Vulnerability

Solution:
Symantec has released fixes to address this issue. Fixes can be automatically applied through Symantec LiveUpdate.

Users who may have downloaded or installed the Symantec Automated Support Assistant should visit the following location to obtain a fixed version:

https://www-secure.symantec.com/techsupp/asa/install.jsphttps://www-secure.symantec.com/techsupp/asa/install.jsp

A tool to remove vulnerable versions of the ActiveX control is available from the following location:

http://www.symantec.com/home_homeoffice/security_response/removaltools.jsphttp://www.symantec.com/home_homeoffice/security_response/removaltools.jsp

Symantec Automated Support Assistant ActiveX Control Buffer Overflow Vulnerability

References:

• Symantec Automated Support Assistant: Vulnerabilities in Support Tool ActiveX Co (Symantec)
  
• Symantec Homepage (Symantec)
  
• Symantec Automated Support Assistant ActiveX control buffer overflow (US-CERT)