Microgaming Download Helper ActiveX Control Remote Buffer Overflow Vulnerability
BID:23595
Info
Microgaming Download Helper ActiveX Control Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 23595 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 23 2007 12:00AM |
| Updated: | Nov 03 2008 03:45PM |
| Credit: | This issue was disclosed in the references US-CERT advisory. |
| Vulnerable: |
Microgaming Download Helper ActiveX Control 0 |
| Not Vulnerable: |
Microgaming Download Helper ActiveX Control 7.2 .19 |
Discussion
Microgaming Download Helper ActiveX Control Remote Buffer Overflow Vulnerability
Microgaming Download Helper ActiveX control is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer.
An attacker may exploit this issue by enticing victims into opening a malicious HTML document.
Exploiting this issue allows remote attackers to execute arbitrary code in the context of applications using the affected ActiveX control and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions.
Microgaming Download Helper ActiveX control is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer.
An attacker may exploit this issue by enticing victims into opening a malicious HTML document.
Exploiting this issue allows remote attackers to execute arbitrary code in the context of applications using the affected ActiveX control and to compromise affected computers. Failed attempts will likely result in denial-of-service conditions.
Exploit / POC
Microgaming Download Helper ActiveX Control Remote Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microgaming Download Helper ActiveX Control Remote Buffer Overflow Vulnerability
Solution:
The vendor has addressed this issue in version 7.2.0.19. Contact the vendor for details on obtaining the appropriate updates.
NOTE: Microsoft released a security advisory (956391) and updates that fix the issue by setting the kill bit on the affected control.
UPDATE (October 29, 2008): Users with Microsoft SQL Server 2005 Reporting Services Add-in for Microsoft SharePoint Technologies who have installed this update will not be able to print until they upgrade to the latest version. See the Microsoft Security Advisory 956391 for details.
Solution:
The vendor has addressed this issue in version 7.2.0.19. Contact the vendor for details on obtaining the appropriate updates.
NOTE: Microsoft released a security advisory (956391) and updates that fix the issue by setting the kill bit on the affected control.
UPDATE (October 29, 2008): Users with Microsoft SQL Server 2005 Reporting Services Add-in for Microsoft SharePoint Technologies who have installed this update will not be able to print until they upgrade to the latest version. See the Microsoft Security Advisory 956391 for details.
References
Microgaming Download Helper ActiveX Control Remote Buffer Overflow Vulnerability
References:
References: