Ourgame 'GLIEDown2.dll' ActiveX Control Remote Code Execution Vulnerability

Bugtraq ID:	29118
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 08 2008 12:00AM
Updated:	May 09 2008 04:05PM
Credit:	The exploitation of this issue was detected by the DeepSight honeypot. Exploit code was also found to be publicly available but the discoverer of this issue is unknown.
Vulnerable:	Ourgame GLIEDown2.dll 0 GlobalLink GlobalLink 2.8.1.2 beta
Not Vulnerable:

Ourgame 'GLIEDown2.dll' ActiveX Control Remote Code Execution Vulnerability

Ourgame 'GLIEDown2.dll' ActiveX control is prone to a remote code-execution vulnerability because it fails to sufficiently verify user-supplied input.

An attacker can exploit this issue to run arbitrary attacker-supplied code in the context of the currently logged-in user. Failed exploits attempts will trigger denial-of-service conditions.

Note that GlobalLink 2.8.1.2 beta is also affected by this issue.

Ourgame 'GLIEDown2.dll' ActiveX Control Remote Code Execution Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious HTML page.

The DeepSight Threat Analysis Team discovered that this issue is being actively exploited in the wild.

The following exploit is available:

• /data/vulnerabilities/exploits/29118.html

Ourgame 'GLIEDown2.dll' ActiveX Control Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ourgame 'GLIEDown2.dll' ActiveX Control Remote Code Execution Vulnerability

References:

• Ma Lianzhong latest network exploits (K.K_security hut)
  
• GLIEDown2.dll Active (NSFOCUS)
  
• GlobalLink Homepage (GlobalLink)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Ourgame Homepage (Ourgame)