SupportSoft ActiveX Controls Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	22564
Class:	Boundary Condition Error
CVE:	CVE-2006-6490
Remote:	Yes
Local:	No
Published:	Feb 22 2007 12:00AM
Updated:	Feb 23 2007 01:06AM
Credit:	Mark Litchfield of Next Generation Security Research (NGS) discovered these issues. They were independently identified by CERT. Peter Vreugdenhil working with iDefense also assisted in the coordination of the resolution of the vulnerabilities.
Vulnerable:	Symantec Norton System Works 2006 Symantec Norton Internet Security 2006 Professional Edition Symantec Norton AntiVirus 2006 Symantec Automated Support Assistant 0 SupportSoft ActiveX Control 0
Not Vulnerable:

SupportSoft ActiveX Controls Remote Buffer Overflow Vulnerabilities

SupportSoft ActiveX controls are prone to multiple remote buffer-overflow vulnerabilities because the software fails to properly bounds-check user-supplied input prior to copying it to insufficiently sized memory buffers.

Exploiting these issues allows remote attackers to execute arbitrary machine code in the context of applications that employ the vulnerable controls (typically Microsoft Internet Explorer).

The affected software component is included in several third-party applications.

SupportSoft ActiveX Controls Remote Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

SupportSoft ActiveX Controls Remote Buffer Overflow Vulnerabilities

Solution:
The vendor has released an update to address these issues.

Symantec has released an advisory along with fixes to address these issues.

Please see the referenced advisory for more information.

SupportSoft ActiveX Controls Remote Buffer Overflow Vulnerabilities

References:

• SupportSoft Homepage (SupportSoft)
  
• SYM07-002 Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor (Symantec)
  
• VU#441785 (US-CERT)