AOL Radio AmpX.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
BID:26396
Info
AOL Radio AmpX.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 26396 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-5755 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 09 2007 12:00AM |
| Updated: | Nov 13 2007 03:55PM |
| Credit: | The discoverer of these vulnerabilities wishes to remain anonymous |
| Vulnerable: |
AOL Radio 0 AOL AmpX.dll 2.6.1.11 |
| Not Vulnerable: | |
Discussion
AOL Radio AmpX.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
AOL Radio AmpX ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.
Invoking the object from a malicious website or HTML email may trigger the condition. A successful attack would corrupt process memory, allowing arbitrary code to run in the context of the client application using the affected ActiveX control.
'AmpX.dll' 2.6.1.11 is vulnerable; prior versions may also be affected.
AOL Radio AmpX ActiveX control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.
Invoking the object from a malicious website or HTML email may trigger the condition. A successful attack would corrupt process memory, allowing arbitrary code to run in the context of the client application using the affected ActiveX control.
'AmpX.dll' 2.6.1.11 is vulnerable; prior versions may also be affected.
Exploit / POC
AOL Radio AmpX.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
AOL Radio AmpX.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
Solution:
The vendor released an update to address these issues. Please see the references for more information.
Solution:
The vendor released an update to address these issues. Please see the references for more information.
References
AOL Radio AmpX.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- AOL Radio Homepage (AOL)
- AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities (iDefense Labs)