HP Virtual Rooms 'hpvirtualrooms14.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities
BID:27384
Info
HP Virtual Rooms 'hpvirtualrooms14.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 27384 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0213 CVE-2008-0437 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 22 2008 12:00AM |
| Updated: | Jul 05 2016 09:38PM |
| Credit: | Elazar Broad is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
HP Virtual Rooms hpvirtualrooms14.dll ActiveX 1.0.0.100 HP Virtual Rooms 6 |
| Not Vulnerable: |
HP Virtual Rooms 7 |
Discussion
HP Virtual Rooms 'hpvirtualrooms14.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities
HP Virtual Rooms ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer), but this has not been confirmed. Failed exploit attempts will likely result in denial-of-service conditions.
HP Virtual Rooms with 'hpvirtualrooms14.dll' ActiveX control 1.0.0.100 is vulnerable; other versions may also be affected.
HP Virtual Rooms ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer), but this has not been confirmed. Failed exploit attempts will likely result in denial-of-service conditions.
HP Virtual Rooms with 'hpvirtualrooms14.dll' ActiveX control 1.0.0.100 is vulnerable; other versions may also be affected.
Exploit / POC
HP Virtual Rooms 'hpvirtualrooms14.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities
Attackers must trick a victim into visiting a malicious webpage to exploit this issue.
UPDATE (March 26, 2008): The Symantec DeepSight Team has discovered active exploits in the wild.
The following exploit is available for the 'AuthenticationURL' method:
Attackers must trick a victim into visiting a malicious webpage to exploit this issue.
UPDATE (March 26, 2008): The Symantec DeepSight Team has discovered active exploits in the wild.
The following exploit is available for the 'AuthenticationURL' method:
Solution / Fix
HP Virtual Rooms 'hpvirtualrooms14.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities
Solution:
The vendor released an update to address these issues. The update can be obtained and installed by using the 'Test your setup' link located in the product homepage. Please see the references for more information
Solution:
The vendor released an update to address these issues. The update can be obtained and installed by using the 'Test your setup' link located in the product homepage. Please see the references for more information
References
HP Virtual Rooms 'hpvirtualrooms14.dll' ActiveX Control Multiple Buffer Overflow Vulnerabilities
References:
References:
- HP Virtual Rooms Homepage (HP)
- HP Virtual Rooms WebHPVCInstall Control Multiple Buffer Overflows (Elazar Broad)
- Micro News Homepage (phptoys)
- Microsoft Knowledge Base Article 240797 (Microsoft)