Green Dam Youth Escort 'SurfGd.dll' URI Processing Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	35341
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 12 2009 12:00AM
Updated:	Jun 30 2009 07:19PM
Credit:	Scott Wolchok, Randy Yao, and J. Alex Halderman
Vulnerable:	Jinhui Green Dam Youth Escort 3.17
Not Vulnerable:

Green Dam Youth Escort 'SurfGd.dll' URI Processing Remote Stack Buffer Overflow Vulnerability

Green Dam Youth Escort is prone to a remote stack-based buffer-overflow vulnerability.

Successful exploits will allow the attacker to execute arbitrary code in the context of the browser process,
compromising the browser and possibly the computer. Failed attacks may cause denial-of-service conditions.

Green Dam Youth Escort 'SurfGd.dll' URI Processing Remote Stack Buffer Overflow Vulnerability

The following proof of concept is available. An exploit module for the Metasploit Framework is also available.

• /data/vulnerabilities/exploits/2009-green-dam.zip
• /data/vulnerabilities/exploits/35341.rb

Green Dam Youth Escort 'SurfGd.dll' URI Processing Remote Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Green Dam Youth Escort 'SurfGd.dll' URI Processing Remote Stack Buffer Overflow Vulnerability

References:

• Analysis of the Green Dam Censorware System (Scott Wolchok, Randy Yao, and J. Alex Halderman)
  
• Green Dam Youth Escort Homepage (Jinhui)