StreamAudio ProxyManager 'InternalTuneIn()' ActiveX Control Buffer Overflow Vulnerability
BID:27247
Info
StreamAudio ProxyManager 'InternalTuneIn()' ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 27247 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0248 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2008 12:00AM |
| Updated: | May 07 2015 05:33PM |
| Credit: | Elazar Broad <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
StreamAudio ccpm_0237.dll 0 |
| Not Vulnerable: | |
Discussion
StreamAudio ProxyManager 'InternalTuneIn()' ActiveX Control Buffer Overflow Vulnerability
The StreamAudio ProxyManager ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
A successful exploit will allow an attacker to execute arbitrary code in the context of the application using the affected ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
The StreamAudio ProxyManager ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
A successful exploit will allow an attacker to execute arbitrary code in the context of the application using the affected ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
Exploit / POC
StreamAudio ProxyManager 'InternalTuneIn()' ActiveX Control Buffer Overflow Vulnerability
To exploit this issue, attackers must entice an unsuspecting user to view a malicious web document.
The following exploit code is available:
To exploit this issue, attackers must entice an unsuspecting user to view a malicious web document.
The following exploit code is available:
Solution / Fix
StreamAudio ProxyManager 'InternalTuneIn()' ActiveX Control Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
StreamAudio ProxyManager 'InternalTuneIn()' ActiveX Control Buffer Overflow Vulnerability
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- StreamAudio ChainCast ProxyManager ccpm_0237.dll Buffer Overflow (Elazar Broad
- Vendor Homepage (StreamAudio)