IntelliTamper 'CFG' File Buffer Overflow Vulnerability

Bugtraq ID:	33038
Class:	Boundary Condition Error
CVE:	CVE-2008-5868
Remote:	Yes
Local:	No
Published:	Dec 29 2008 12:00AM
Updated:	Jan 09 2009 05:52PM
Credit:	His0k4
Vulnerable:	IntelliTamper IntelliTamper 2.08 IntelliTamper IntelliTamper 2.07
Not Vulnerable:

IntelliTamper 'CFG' File Buffer Overflow Vulnerability

IntelliTamper is prone to a buffer-overflow vulnerability because the application fails to properly validate the size of attacker-supplied data before copying it into a finite-sized buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of applications that use IntelliTamper. Failed exploit attempts will likely crash the application, denying service to legitimate users.

IntelliTamper 2.07 and 2.08 are vulnerable; other versions may also be affected.

IntelliTamper 'CFG' File Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/33038.py

IntelliTamper 'CFG' File Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IntelliTamper 'CFG' File Buffer Overflow Vulnerability

References:

• IntelliTamper Homepage (IntelliTamper)