SwiftView ActiveX Control and Browser Plugin Stack Buffer Overflow Vulnerability

Bugtraq ID:	27527
Class:	Unknown
CVE:	CVE-2007-5602
Remote:	Yes
Local:	No
Published:	Jan 30 2008 12:00AM
Updated:	Jan 31 2008 06:27PM
Credit:	Will Dormann of the CERT/CC is credited with discovering this vulnerability.
Vulnerable:	eLynx SwiftView 8.3.4 eLynx SwiftSend 8.3.4
Not Vulnerable:	eLynx SwiftView 8.3.5 eLynx SwiftSend 8.3.5

SwiftView ActiveX Control and Browser Plugin Stack Buffer Overflow Vulnerability

SwiftView is prone to a stack-based buffer-overflow vulnerability. This issue affects both the SwiftView ActiveX control and the browser plugin.

Attackers can exploit this issue to execute arbitrary code in the context of the application using the affected application. Successful attacks can compromise the application and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions.

SwiftView ActiveX Control and Browser Plugin Stack Buffer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SwiftView ActiveX Control and Browser Plugin Stack Buffer Overflow Vulnerability

Solution:
The vendor has addressed this issue in SwiftView 8.3.5.

SwiftView ActiveX Control and Browser Plugin Stack Buffer Overflow Vulnerability

References:

• eLynx Security Bulletin SBSV-07-10-02 (eLynx)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• SwiftView Homepage (eLynx)
  
• Vulnerability Note VU#639169 SwiftView ActiveX control and plug-in stack buffer (US-CERT)