IntelliTamper 'MAP' File Buffer Overflow Vulnerability
BID:33022
Info
IntelliTamper 'MAP' File Buffer Overflow Vulnerability
| Bugtraq ID: | 33022 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 27 2008 12:00AM |
| Updated: | Dec 31 2008 06:21PM |
| Credit: | cN4phux |
| Vulnerable: |
IntelliTamper IntelliTamper 2.08 IntelliTamper IntelliTamper 2.07 |
| Not Vulnerable: | |
Discussion
IntelliTamper 'MAP' File Buffer Overflow Vulnerability
IntelliTamper is prone to a buffer-overflow vulnerability because the application fails to properly validate the size of attacker-supplied data before copying it into a finite-sized buffer.
This issue allows remote attackers to execute arbitrary machine code in the context of applications that use IntelliTamper. Failed exploit attempts will likely crash the application, denying service to legitimate users.
IntelliTamper 2.07 and 2.08 are vulnerable; other versions may also be affected.
NOTE: This issue may be related to the vulnerability covered in BID 18039 (IntelliTamper Map Files Buffer Overflow Vulnerability). We will update this BID pending further investigation.
IntelliTamper is prone to a buffer-overflow vulnerability because the application fails to properly validate the size of attacker-supplied data before copying it into a finite-sized buffer.
This issue allows remote attackers to execute arbitrary machine code in the context of applications that use IntelliTamper. Failed exploit attempts will likely crash the application, denying service to legitimate users.
IntelliTamper 2.07 and 2.08 are vulnerable; other versions may also be affected.
NOTE: This issue may be related to the vulnerability covered in BID 18039 (IntelliTamper Map Files Buffer Overflow Vulnerability). We will update this BID pending further investigation.
Exploit / POC
IntelliTamper 'MAP' File Buffer Overflow Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
IntelliTamper 'MAP' File Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
IntelliTamper 'MAP' File Buffer Overflow Vulnerability
References:
References:
- IntelliTamper Homepage (IntelliTamper)