easyHDR Pro 1.60.2 Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	33363
Class:	Boundary Condition Error
CVE:	CVE-2009-0246 CVE-2009-0254
Remote:	Yes
Local:	No
Published:	Jan 20 2009 12:00AM
Updated:	Jan 30 2009 09:39PM
Credit:	Stefan Cornelius of Secunia Research and the vendor.
Vulnerable:	Bartlomiej Okonek easyHDR Pro 1.60.2
Not Vulnerable:	Bartlomiej Okonek easyHDR Pro 1.60.3

easyHDR Pro 1.60.2 Multiple Buffer Overflow Vulnerabilities

easyHDR Pro is prone to multiple buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data.

Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

easyHDR Pro 1.60.2 is vulnerable; prior versions may also be affected.

easyHDR Pro 1.60.2 Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

easyHDR Pro 1.60.2 Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Bartlomiej Okonek easyHDR Pro 1.60.2

• Bartlomiej Okonek easyHDR_setup.exe
  http://www.drewmyersphoto.net/~easyhdr/easyHDR_setup.exe

easyHDR Pro 1.60.2 Multiple Buffer Overflow Vulnerabilities

References:

• Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow (Secunia Research)
  
• easyHDR Version History Homepage (Bartlomiej Okonek)
  
• Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow (Secunia Research )