Roxio CinePlayer SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability
BID:23412
Info
Roxio CinePlayer SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 23412 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-1559 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 11 2007 12:00AM |
| Updated: | Jun 22 2009 06:19PM |
| Credit: | Carsten Eiram of Secunia Research discovered these issues. |
| Vulnerable: |
Roxio CinePlayer 3.2 |
| Not Vulnerable: | |
Discussion
Roxio CinePlayer SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability
Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer.
A remote attacker may exploit this issue by enticing victims into opening a malicious HTML document.
Exploiting this issue allows the attacker to execute arbitrary code in the context of applications using the affected ActiveX control and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions.
Roxio CinePlayer 3.2 is vulnerable; other versions may also be affected.
Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer.
A remote attacker may exploit this issue by enticing victims into opening a malicious HTML document.
Exploiting this issue allows the attacker to execute arbitrary code in the context of applications using the affected ActiveX control and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions.
Roxio CinePlayer 3.2 is vulnerable; other versions may also be affected.
Exploit / POC
Roxio CinePlayer SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability
UPDATE (June 18, 2009): This issue is being actively exploited in the wild.
The following exploit is available:
UPDATE (June 18, 2009): This issue is being actively exploited in the wild.
The following exploit is available:
Solution / Fix
Roxio CinePlayer SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Roxio CinePlayer SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability
References:
References:
- CinePlayer Homepage (Roxio)
- CinePlayer SonicDVDDashVRNav.dll Buffer Overflow Vulnerability (Secunia)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Roxio Homepage (Roxio)