IntelliTamper '.CAT' Catalog File Buffer Overflow Vulnerability

Bugtraq ID:	33179
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 08 2009 12:00AM
Updated:	Jan 08 2009 11:12PM
Credit:	Cnaph
Vulnerable:	IntelliTamper IntelliTamper 2.08 IntelliTamper IntelliTamper 2.07
Not Vulnerable:

IntelliTamper '.CAT' Catalog File Buffer Overflow Vulnerability

IntelliTamper is prone to a buffer-overflow vulnerability because the application fails to properly validate the size of user-supplied data before copying it into a fixed-sized buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of applications that use IntelliTamper. Failed exploit attempts will likely crash the application, denying service to legitimate users.

IntelliTamper 2.07 and 2.08 are vulnerable; other versions may also be affected.

IntelliTamper '.CAT' Catalog File Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/33179.py

IntelliTamper '.CAT' Catalog File Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IntelliTamper '.CAT' Catalog File Buffer Overflow Vulnerability

References:

• IntelliTamper Homepage (IntelliTamper)