Altap Servant Salamander PE File Handling Buffer Overflow Vulnerability

Bugtraq ID:	24557
Class:	Boundary Condition Error
CVE:	CVE-2007-3314
Remote:	Yes
Local:	No
Published:	Apr 28 2006 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	Tan Chew Keong disclosed this vulnerability.
Vulnerable:	Servant Salamander 2.5 Servant Salamander 2.0
Not Vulnerable:

Altap Servant Salamander PE File Handling Buffer Overflow Vulnerability

Servant Salamander is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

Exploiting this issue allows attackers to execute arbitrary machine code in the context of users running the affected application.

These versions were reported vulnerable:

Altap Salamander 2.5 with Portable Executable Viewer 2.02
Servant Salamander 2.0 with Portable Executable Viewer 1.00

Altap Servant Salamander PE File Handling Buffer Overflow Vulnerability

The researcher responsible for discovering this issue has developed exploit code to trigger it. Please see the references for details.

Altap Servant Salamander PE File Handling Buffer Overflow Vulnerability

Solution:
This issue has reportedly been addressed in version 2.51, but Symantec was not able to confirm this information. Please contact the vendor for details.

Altap Servant Salamander PE File Handling Buffer Overflow Vulnerability

References:

• Altap Salamander PE Viewer Buffer Overflow Vulnerability (Tan Chew Keong)
  
• Servant Salamander Web Site (Servant Salamander)