IntelliTamper HTML 'href' Parsing Buffer Overflow Vulnerability

Bugtraq ID:	30317
Class:	Boundary Condition Error
CVE:	CVE-2008-3360
Remote:	Yes
Local:	No
Published:	Jul 21 2008 12:00AM
Updated:	Apr 16 2015 05:56PM
Credit:	k`sOSe
Vulnerable:	IntelliTamper IntelliTamper 2.07
Not Vulnerable:

IntelliTamper HTML 'href' Parsing Buffer Overflow Vulnerability

IntelliTamper is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

This issue allows remote attackers to execute arbitrary machine code in the context of the application. Failed exploit attempts will likely crash the application, denying service to legitimate users.

IntelliTamper 2.07 is vulnerable; other versions may also be affected.

IntelliTamper HTML 'href' Parsing Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/30317.pl
• /data/vulnerabilities/exploits/30317-2.pl
• /data/vulnerabilities/exploits/30317-2.c
• /data/vulnerabilities/exploits/30317.c

IntelliTamper HTML 'href' Parsing Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IntelliTamper HTML 'href' Parsing Buffer Overflow Vulnerability

References:

• IntelliTamper Homepage (IntelliTamper)