Vantage Linguistics AnswerWorks ActiveX Controls Multiple Unspecified Vulnerabilities
BID:26815
Info
Vantage Linguistics AnswerWorks ActiveX Controls Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 26815 |
| Class: | Unknown |
| CVE: |
CVE-2007-6387 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 11 2007 12:00AM |
| Updated: | Jan 03 2008 09:20PM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Vantage Linquistics AnswerWorks 5.0 .6 Vantage Linquistics AnswerWorks 5.0 .5 Vantage Linquistics AnswerWorks 5.0 .4 Vantage Linquistics AnswerWorks 5.0 .3 Vantage Linquistics AnswerWorks 5.0 .2 Vantage Linquistics AnswerWorks 5.0 .1 Vantage Linquistics AnswerWorks 5.0 .0 Vantage Linquistics AnswerWorks 4.0 .100 Vantage Linquistics AnswerWorks 4.0 .0 Vantage Linquistics AnswerWorks 3.0 .0 |
| Not Vulnerable: | |
Discussion
Vantage Linguistics AnswerWorks ActiveX Controls Multiple Unspecified Vulnerabilities
Multiple Vantage Linguistics AnswerWorks ActiveX controls are prone to multiple unspecified vulnerabilities.
Successfully exploiting these issues will allow remote attackers to execute arbitrary code in the context of an application using the ActiveX control or to trigger denial-of-service conditions. However, the precise impact has not been confirmed.
AnswerWorks 3.0.0.0 - 4.0.0.100 and 5.0.0.0 - 5.0.0.6 are vulnerable.
NOTE: Currently, very few details are available regarding these issues. We will update this BID as more information emerges. Individual issues may be given separate BIDs.
UPDATE (December 31, 2007): Three of these issues are known to be buffer-overflow vulnerabilities.
Multiple Vantage Linguistics AnswerWorks ActiveX controls are prone to multiple unspecified vulnerabilities.
Successfully exploiting these issues will allow remote attackers to execute arbitrary code in the context of an application using the ActiveX control or to trigger denial-of-service conditions. However, the precise impact has not been confirmed.
AnswerWorks 3.0.0.0 - 4.0.0.100 and 5.0.0.0 - 5.0.0.6 are vulnerable.
NOTE: Currently, very few details are available regarding these issues. We will update this BID as more information emerges. Individual issues may be given separate BIDs.
UPDATE (December 31, 2007): Three of these issues are known to be buffer-overflow vulnerabilities.
Exploit / POC
Vantage Linguistics AnswerWorks ActiveX Controls Multiple Unspecified Vulnerabilities
To exploit some of these issues, an attacker must entice an unsuspecting user to open a malicious web document.
The following proof-of-concept code is available:
To exploit some of these issues, an attacker must entice an unsuspecting user to open a malicious web document.
The following proof-of-concept code is available:
Solution / Fix
Vantage Linguistics AnswerWorks ActiveX Controls Multiple Unspecified Vulnerabilities
Solution:
The vendor released a patch to address this issue. Please see the references for more information.
Vantage Linquistics AnswerWorks 3.0 .0
Vantage Linquistics AnswerWorks 4.0 .0
Vantage Linquistics AnswerWorks 4.0 .100
Vantage Linquistics AnswerWorks 5.0 .6
Vantage Linquistics AnswerWorks 5.0 .4
Vantage Linquistics AnswerWorks 5.0 .3
Vantage Linquistics AnswerWorks 5.0 .0
Vantage Linquistics AnswerWorks 5.0 .1
Vantage Linquistics AnswerWorks 5.0 .5
Vantage Linquistics AnswerWorks 5.0 .2
Solution:
The vendor released a patch to address this issue. Please see the references for more information.
Vantage Linquistics AnswerWorks 3.0 .0
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 4.0 .0
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 4.0 .100
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .6
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .4
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .3
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .0
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .1
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .5
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
Vantage Linquistics AnswerWorks 5.0 .2
-
Vantage Linquistics awsecuritypatch.msi
http://www.vantagelinguistics.com/downloads/awsecuritypatch.msi
References
Vantage Linguistics AnswerWorks ActiveX Controls Multiple Unspecified Vulnerabilities
References:
References:
- AnswerWorks Release Information (Vantage Linguistics)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Vendor Homepage (Vantage Linguistics)
- MS Security Bulletin MS07-069 (Microsoft)