W3C Amaya Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	33047
Class:	Boundary Condition Error
CVE:	CVE-2009-0323
Remote:	Yes
Local:	No
Published:	Jan 28 2009 12:00AM
Updated:	Feb 11 2009 07:58PM
Credit:	Dan Crowley and Alfredo Ortega from Core Security Technologies
Vulnerable:	W3C Amaya 10.0.1 W3C Amaya 9.5 W3C Amaya 9.4 W3C Amaya 11.0 W3C Amaya 10.1
Not Vulnerable:	W3C Amaya 11.1

W3C Amaya Multiple Buffer Overflow Vulnerabilities

W3C Amaya is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to Amaya 11.1 are vulnerable.

W3C Amaya Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

W3C Amaya Multiple Buffer Overflow Vulnerabilities

Solution:
These issues are resolved in Amaya 11.1; please see the references for more information.

W3C Amaya Multiple Buffer Overflow Vulnerabilities

References:

• Amaya Homepage (W3C)
  
• CORE-2008-1211: Amaya web editor XML and HTML parser vulnerabilities (Core Security Technologies Advisories )
  
• Amaya web editor XML and HTML parser vulnerabilities (Core Security Technologies)