HTML Email Creator HTML Tags Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	34487
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 13 2009 12:00AM
Updated:	Jul 30 2010 05:35AM
Credit:	dun
Vulnerable:	HTML-EMAIL.NET HTML Email Creator 2.42 build 718 HTML-EMAIL.NET HTML Email Creator 2.1 build 668
Not Vulnerable:

HTML Email Creator HTML Tags Multiple Buffer Overflow Vulnerabilities

HTML Email Creator is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage these issues to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

This issue affects the following:

HTML Email Creator 2.1 build 668
HTML Email Creator 2.42 build 718

Other versions may also be affected.

HTML Email Creator HTML Tags Multiple Buffer Overflow Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/34487.c
• /data/vulnerabilities/exploits/34487.pl

HTML Email Creator HTML Tags Multiple Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HTML Email Creator HTML Tags Multiple Buffer Overflow Vulnerabilities

References:

• HTML Email Creator Homepage (HTML-EMAIL.NET)