Akamai Download Manager ActiveX Control Redswoosh Download Stack Buffer Overflow Vulnerability
BID:35778
Info
Akamai Download Manager ActiveX Control Redswoosh Download Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 35778 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 22 2009 12:00AM |
| Updated: | Jul 27 2009 11:35PM |
| Credit: | iDefense Labs |
| Vulnerable: |
Akamai Akamai Download Manager 2.2.4 .3 Akamai Akamai Download Manager 2.2.3 7 Akamai Akamai Download Manager 2.2.3.5 Akamai Akamai Download Manager 2.2.1.0 Akamai Akamai Download Manager 2.2.0.0 |
| Not Vulnerable: |
Akamai Akamai Download Manager 2.2.4 .8 |
Discussion
Akamai Download Manager ActiveX Control Redswoosh Download Stack Buffer Overflow Vulnerability
Akamai Download Manager ActiveX control is prone to a remote stack-based buffer-overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Akamai Download Manager 2.2.4.8 are vulnerable.
Akamai Download Manager ActiveX control is prone to a remote stack-based buffer-overflow vulnerability.
Attackers can exploit this issue to execute arbitrary code within the context of an application that uses the ActiveX control (typically Internet Explorer). Failed exploit attempts will result in a denial-of-service condition.
Versions prior to Akamai Download Manager 2.2.4.8 are vulnerable.
Exploit / POC
Akamai Download Manager ActiveX Control Redswoosh Download Stack Buffer Overflow Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Akamai Download Manager ActiveX Control Redswoosh Download Stack Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Akamai Download Manager ActiveX Control Redswoosh Download Stack Buffer Overflow Vulnerability
References:
References:
- Akamai Download Manager Stack Buffer Overflow Vulnerability (iDefense Labs)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Vendor Homepage (Akamai)
- Akamai Technologies Security Advisory 2009-0001 (Download Manager) (Akamai Security Team