IncrediMail Ltd. IncrediMail File Overwrite Vulnerability

Bugtraq ID:	2712
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 08 2001 12:00AM
Updated:	May 08 2001 12:00AM
Credit:	Discovered on May 8, 2001 and posted to Bugtraq May 11, 2001 by Obscure - <[email protected]>.
Vulnerable:	IncrediMail Ltd. IncrediMail Build 1400185 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home
Not Vulnerable:	IncrediMail Ltd. IncrediMail Build 560 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home

IncrediMail Ltd. IncrediMail File Overwrite Vulnerability

IncrediMail is a free email program with an animated interface, it enables a user to add animated graphics to email messages. IncrediMail is provided by IncrediMail Ltd.

It may be possible for attackers to create malicious 'skin' files that will cause arbitrary files on the same drive as Incredimail to be overwritten when the skin is loaded.

This could lead to a denial of service or even possibly provide system access to attackers.

IncrediMail Ltd. IncrediMail File Overwrite Vulnerability

Obscure - <[email protected]> has provided the following exploit:

http://irc.m0ss.com/eos/advisories/incredimailexploit/

IncrediMail Ltd. IncrediMail File Overwrite Vulnerability

Solution:
Reportedly IncrediMail Build 560 is not affected by this issue:


IncrediMail Ltd. IncrediMail Build 1400185

• IncrediMail Ltd. IncrediMailSetup
  http://www.incredimail.com/contents/setup/IncrediMailSetup.exe

IncrediMail Ltd. IncrediMail File Overwrite Vulnerability

References:

• IncrediMail Homepage (IncrediMail Ltd.)