Black Ice Printer Driver Resource Toolkit ActiveX Control Multiple Remote Vulnerabilities
BID:36548
Info
Black Ice Printer Driver Resource Toolkit ActiveX Control Multiple Remote Vulnerabilities
| Bugtraq ID: | 36548 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 29 2009 12:00AM |
| Updated: | Sep 29 2009 11:30PM |
| Credit: | Nine:Situations:Group::pyrokinesis |
| Vulnerable: |
Black Ice Software Printer Driver Resource Toolkit 0 |
| Not Vulnerable: | |
Discussion
Black Ice Printer Driver Resource Toolkit ActiveX Control Multiple Remote Vulnerabilities
Black Ice Printer Driver Resource Toolkit ActiveX Control is prone to a buffer-overflow vulnerability and a remote command-execution vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
Black Ice Printer Driver Resource Toolkit ActiveX Control is prone to a buffer-overflow vulnerability and a remote command-execution vulnerability because the application fails to perform adequate boundary checks on user-supplied data.
Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.
Exploit / POC
Black Ice Printer Driver Resource Toolkit ActiveX Control Multiple Remote Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
Black Ice Printer Driver Resource Toolkit ActiveX Control Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Black Ice Printer Driver Resource Toolkit ActiveX Control Multiple Remote Vulnerabilities
References:
References:
- Controlling Print Jobs using the BlackIceDEVMODE Controls (Black Ice Software)
- Vendor Homepage (Black Ice Software)