Rising Online Virus Scanner ActiveX Control 'Scan()' Method Stack Buffer Overflow Vulnerability

Bugtraq ID:	38282
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 17 2010 12:00AM
Updated:	Feb 17 2010 08:01PM
Credit:	wirebonder
Vulnerable:	Rising Antivirus International Virus Scanner 22.0.5
Not Vulnerable:

Rising Online Virus Scanner ActiveX Control 'Scan()' Method Stack Buffer Overflow Vulnerability

Rising Online Virus Scanner ActiveX control is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits may allow an attacker to execute arbitrary code in the context of a user running the affected application. Failed attempts will likely result in denial-of-service conditions.

Rising Online Virus Scanner 22.0.5 is vulnerable; other versions may also be affected.

Rising Online Virus Scanner ActiveX Control 'Scan()' Method Stack Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/38282.html

Rising Online Virus Scanner ActiveX Control 'Scan()' Method Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Rising Online Virus Scanner ActiveX Control 'Scan()' Method Stack Buffer Overflow Vulnerability

References:

• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• Rising Homepage (Rising International Software)