KeyWorks KeyHelp Module 'keyhelp.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
BID:36546
Info
KeyWorks KeyHelp Module 'keyhelp.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 36546 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2012-2515 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 29 2009 12:00AM |
| Updated: | Apr 13 2015 08:02PM |
| Credit: | Nine Situations Group - pyrokinesis |
| Vulnerable: |
KeyWorks KeyHelp Module 1.2.312 EMC Documentum ApplicationXtender Desktop 5.4 EMC Captiva Quickscan Pro 4.6 SP1 |
| Not Vulnerable: | |
Discussion
KeyWorks KeyHelp Module 'keyhelp.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
KeyWorks KeyHelp Module is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
Attackers can leverage this issue to execute arbitrary code in the context of the application. Successful exploits will compromise the application and the computer. Failed attacks will cause denial-of-service conditions.
KeyWorks KeyHelp Module is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
Attackers can leverage this issue to execute arbitrary code in the context of the application. Successful exploits will compromise the application and the computer. Failed attacks will cause denial-of-service conditions.
Exploit / POC
KeyWorks KeyHelp Module 'keyhelp.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit is available:
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit is available:
Solution / Fix
KeyWorks KeyHelp Module 'keyhelp.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
KeyWorks KeyHelp Module 'keyhelp.ocx' ActiveX Control Remote Buffer Overflow Vulnerability
References:
References:
- KeyHelp Homepage (KeyWorks)
- Microsoft Knowledge Base Article 240797 (Microsoft)