ffdshow Long URL Link Remote Buffer Overflow Vulnerability
BID:32438
Info
ffdshow Long URL Link Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 32438 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-5381 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 24 2008 12:00AM |
| Updated: | Dec 31 2008 08:02PM |
| Credit: | SVRT-Bkis |
| Vulnerable: |
ffdshow ffdshow rev2322_20081114 |
| Not Vulnerable: |
ffdshow ffdshow rev2347_20081123 |
Discussion
ffdshow Long URL Link Remote Buffer Overflow Vulnerability
The 'ffdshow' codec is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized buffer.
Attackers can exploit this issue to execute arbitrary code in the context of an application that uses the library. Failed attacks may cause denial-of-service conditions.
This issue affects versions prior to ffdshow rev2347_20081123. Additional applications that use this codec may also be vulnerable.
The 'ffdshow' codec is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized buffer.
Attackers can exploit this issue to execute arbitrary code in the context of an application that uses the library. Failed attacks may cause denial-of-service conditions.
This issue affects versions prior to ffdshow rev2347_20081123. Additional applications that use this codec may also be vulnerable.
Exploit / POC
ffdshow Long URL Link Remote Buffer Overflow Vulnerability
A working commercial exploit is available through FrSIRT's Exploit and PoC Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through FrSIRT's Exploit and PoC Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
ffdshow Long URL Link Remote Buffer Overflow Vulnerability
Solution:
Fixes are available. Please see the references for more information.
ffdshow ffdshow rev2322_20081114
Solution:
Fixes are available. Please see the references for more information.
ffdshow ffdshow rev2322_20081114
-
ffdshow ffdshow_rev2347_20081123_clsid.exe
http://downloads.sourceforge.net/ffdshow-tryout/ffdshow_rev2347_200811 23_clsid.exe?modtime=1227462854&big_mirror=0
References
ffdshow Long URL Link Remote Buffer Overflow Vulnerability
References:
References: