Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
BID:34766
Info
Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 34766 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2009 12:00AM |
| Updated: | Feb 09 2010 06:11PM |
| Credit: | Nine:Situations:Group::trotzkista |
| Vulnerable: |
Symantec WinFax Pro 10.03 |
| Not Vulnerable: | |
Discussion
Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
Symantec WinFax Pro ActiveX control is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
Symantec WinFax Pro 10.03 is vulnerable; other versions may also be affected.
Symantec WinFax Pro ActiveX control is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
Symantec WinFax Pro 10.03 is vulnerable; other versions may also be affected.
Exploit / POC
Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
UPDATE (May 19, 2009): Symantec has detected active exploit attempts of this issue in the wild.
The following exploit code is available:
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
UPDATE (May 19, 2009): Symantec has detected active exploit attempts of this issue in the wild.
The following exploit code is available:
Solution / Fix
Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
Solution:
Updates are available to address this issue. Please the references for more information.
Solution:
Updates are available to address this issue. Please the references for more information.
References
Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
References:
References:
- F-Secure Homepage (F-Secure)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Re: Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploi ([email protected])
- Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer ([email protected])
- Microsoft Security Bulletin MS10-008 (Microsoft)