Nokia Phoenix Service Software ActiveX Controls Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	33726
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 10 2009 12:00AM
Updated:	Feb 10 2009 11:08PM
Credit:	MurderSkillz
Vulnerable:	Nokia Phoenix Service Software 2008.4.7 .32837
Not Vulnerable:

Nokia Phoenix Service Software ActiveX Controls Multiple Buffer Overflow Vulnerabilities

Nokia Phoenix Service Software ActiveX controls are prone to multiple buffer-overflow vulnerabilities because they fail to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers.

An attacker can exploit these issues to execute arbitrary code within the context of the application that invoked the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition.

Nokia Phoenix Service Software 2008.04.007.32837 is vulnerable; other versions may also be affected.

Nokia Phoenix Service Software ActiveX Controls Multiple Buffer Overflow Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/33726.html

Nokia Phoenix Service Software ActiveX Controls Multiple Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nokia Phoenix Service Software ActiveX Controls Multiple Buffer Overflow Vulnerabilities

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Nokia Homepage (Nokia)
  
• Nokia Phoenix Service Software 2008.04.007.32837 overflow POC ([email protected])