B21Soft BFup ActiveX Control 'FilePath' Remote Buffer Overflow Vulnerability

Bugtraq ID:	28131
Class:	Boundary Condition Error
CVE:	CVE-2008-1282
Remote:	Yes
Local:	No
Published:	Mar 06 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	JVN reported this issue.
Vulnerable:	B21Soft BFup 1.0.308 .19
Not Vulnerable:	B21Soft BFup 1.0.802 .29

B21Soft BFup ActiveX Control 'FilePath' Remote Buffer Overflow Vulnerability

B21Soft BFup ActiveX control is prone to a buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to cause a denial-of-service condition and possibly to execute arbitrary code, but this has not been confirmed.

This issue affects B21Soft BFup 1.0.308.19 and prior versions.

B21Soft BFup ActiveX Control 'FilePath' Remote Buffer Overflow Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to access a malicious webpage.

B21Soft BFup ActiveX Control 'FilePath' Remote Buffer Overflow Vulnerability

Solution:
The vendor released BFup 1.0.802.29 to address this issue. Please see the references for more information.


B21Soft BFup 1.0.308 .19

• B21Soft BFup8229.CAB
  http://www.hi-ho.ne.jp/babaq/data/BFup8229.CAB

B21Soft BFup ActiveX Control 'FilePath' Remote Buffer Overflow Vulnerability

References:

• JVN#10606373 BFup ActiveX (JPCERT/CC)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)