Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
BID:25697
Info
Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
| Bugtraq ID: | 25697 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-4916 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 14 2007 12:00AM |
| Updated: | May 12 2015 07:49PM |
| Credit: | Jonathan Sarba <[email protected]>, GoodFellas Security Research Team discovered this issue. |
| Vulnerable: |
Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Professional SP2 Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Home SP2 HP Photo and Image Gallery 1.1 HP All-in-One Series Web Release 2.1 |
| Not Vulnerable: | |
Discussion
Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of applications that use the vulnerable method.
The MFC library included with Microsoft Windows XP SP2 is affected; other versions may also be affected.
This issue also occurs in the 'hpqutil.dll' ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85.
The CFileFind::FindFile method in the MFC library for Microsoft Windows is prone to a buffer-overflow vulnerability because the method fails to perform adequate boundary checks of user-supplied input.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of applications that use the vulnerable method.
The MFC library included with Microsoft Windows XP SP2 is affected; other versions may also be affected.
This issue also occurs in the 'hpqutil.dll' ActiveX control identified by CLSID: F3F381A3-4795-41FF-8190-7AA2A8102F85.
Exploit / POC
Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
The following proof of concept is available for exploiting this issue through the vulnerable HP ActiveX control:
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
The following proof of concept is available for exploiting this issue through the vulnerable HP ActiveX control:
Solution / Fix
Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Microsoft MFC Library CFileFind::FindFile Buffer Overflow Vulnerability
References:
References:
- HP Homepage (HP)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Microsoft Windows Homepage (Microsoft )
- [GOODFELLAS-VULN] ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow ([email protected])
- [GOODFELLAS-VULN] FileFind class from MFC Library cause heap overflow (GOODFELLAS SRT
- FileFind class from MFC Library cause heap overflow. (GOODFELLAS)
- Vulnerability Note VU#611008 Microsoft MFC FindFile function heap buffer overflo (US-CERT)