WebEx GPCContainer Memory Access Violation Multiple Denial of Service Vulnerabilities

Bugtraq ID:	26430
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6005
Remote:	Yes
Local:	No
Published:	Nov 13 2007 12:00AM
Updated:	Nov 20 2007 06:04PM
Credit:	Elazar Broad is credited with the discovery of these issues.
Vulnerable:	WebEx WebEx ActiveX Control 0
Not Vulnerable:

WebEx GPCContainer Memory Access Violation Multiple Denial of Service Vulnerabilities

WebEx is prone to multiple remote denial-of-service vulnerabilities.

Attackers can exploit these issues to crash applications that use the ActiveX control, denying service to legitimate users.

WebEx GPCContainer Memory Access Violation Multiple Denial of Service Vulnerabilities

To exploit this issue, an attacker must entice an unsuspecting victim to use the affected application to view a maliciously crafted webpage.

The following example exploit code is available:

• /data/vulnerabilities/exploits/26430.html

WebEx GPCContainer Memory Access Violation Multiple Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

WebEx GPCContainer Memory Access Violation Multiple Denial of Service Vulnerabilities

References:

• Vendor Homepage (WebEx)