Avant Browser JavaScript Engine Integer Overflow Vulnerability

Bugtraq ID:	31155
Class:	Boundary Condition Error
CVE:	CVE-2008-4166
Remote:	Yes
Local:	No
Published:	Sep 12 2008 12:00AM
Updated:	May 07 2015 05:24PM
Credit:	0x90
Vulnerable:	Avant Browser Avant Browser 11.7 Build 9
Not Vulnerable:

Avant Browser JavaScript Engine Integer Overflow Vulnerability

Avant Browser is prone to an integer-overflow vulnerability that occurs in the JavaScript engine.

An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious site.

Successfully exploiting this issue may allow attackers to crash the affected application, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Avant Browser 11.7 Build 9 is vulnerable; other versions may also be affected.

NOTE: This vulnerability may be related to the issue described in BID 14917 (Mozilla Browser/Firefox JavaScript Engine Integer Overflow Vulnerability).

Avant Browser JavaScript Engine Integer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/31155.js

Avant Browser JavaScript Engine Integer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Avant Browser JavaScript Engine Integer Overflow Vulnerability

References:

• Avant Browser Homepage (Avant Browser)
  
• Avant Browser <= 11.7 Build 9 Integer Denial Of Service Exploit ([email protected] )