MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow Vulnerability
BID:27533
Info
MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 27533 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0659 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 31 2008 12:00AM |
| Updated: | Nov 04 2008 07:55PM |
| Credit: | Elazar Broad discovered this vulnerability. |
| Vulnerable: |
MySpace.com MySpace Uploader MySpaceUploader.ocx 1.0 .5 MySpace.com MySpace Uploader MySpaceUploader.ocx 1.0 .4 |
| Not Vulnerable: |
MySpace.com MySpace Uploader MySpaceUploader.ocx 1.0 .6 |
Discussion
MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow Vulnerability
MySpace Uploader ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
The Symantec DeepSight team has confirmed that this issue can be used to execute code or crash the vulnerable application using 'MySpaceUploader.ocx' 1.0.0.4 and 1.0.0.5; other versions may also be vulnerable.
MySpace Uploader ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts likely result in denial-of-service conditions.
The Symantec DeepSight team has confirmed that this issue can be used to execute code or crash the vulnerable application using 'MySpaceUploader.ocx' 1.0.0.4 and 1.0.0.5; other versions may also be vulnerable.
Exploit / POC
MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow Vulnerability
Reports indicate that this issue is being exploited in the wild.
The following exploit code is available:
Reports indicate that this issue is being exploited in the wild.
The following exploit code is available:
Solution / Fix
MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow Vulnerability
Solution:
Reports indicate that this issue has been addressed in MySpaceUploader.ocx 1.0.0.6. This has not been confirmed by Symantec or the vendor.
Solution:
Reports indicate that this issue has been addressed in MySpaceUploader.ocx 1.0.0.6. This has not been confirmed by Symantec or the vendor.
References
MySpace Uploader 'MySpaceUploader.ocx' ActiveX Control Buffer Overflow Vulnerability
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- MySpace Homepage (MySpace)