Tencent QQ LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	26613
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 27 2007 12:00AM
Updated:	Nov 28 2007 10:23PM
Credit:	axis is credited with the discovery of these vulnerabilities.
Vulnerable:	Tencent QQ 2006
Not Vulnerable:	Tencent QQ 2007.1.1

Tencent QQ LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.

These issues affect Tencent QQ 2006 and prior versions.

Tencent QQ LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

The DeepSight Team has detected exploit attempts of this issue in the wild.

The following exploit code is available:

• /data/vulnerabilities/exploits/26613.c

Tencent QQ LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

Solution:
The vendor released QQ 2007.1.1 to address these issues. Please see the references for more information.


Tencent QQ 2006

• Tencent QQ2007II_Beta2.exe
  http://dl_dir.qq.com/qqfile/qq/2007iibeta2/QQ2007II_Beta2.exe

Tencent QQ LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

References:

• QQ number of overflow vulnerability can be found complete control of the enemy's (axis)
  
• Tencent QQ Homepage (Tencent)