Ziproxy Image Parsing Multiple Integer Overflow Vulnerabilities

Bugtraq ID:	40344
Class:	Input Validation Error
CVE:	CVE-2010-1513
Remote:	Yes
Local:	No
Published:	May 24 2010 12:00AM
Updated:	May 24 2010 12:00AM
Credit:	Stefan Cornelius
Vulnerable:	Ziproxy Ziproxy 3.0
Not Vulnerable:	Ziproxy Ziproxy 3.0.1

Ziproxy Image Parsing Multiple Integer Overflow Vulnerabilities

Ziproxy is prone to multiple integer-overflow vulnerabilities because it fails to properly validate user-supplied data.

Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions.

Ziproxy 3.0 is vulnerable; other versions may also be affected.

Ziproxy Image Parsing Multiple Integer Overflow Vulnerabilities

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ziproxy Image Parsing Multiple Integer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Ziproxy Image Parsing Multiple Integer Overflow Vulnerabilities

References:

• Secunia Research: Ziproxy Two Integer Overflow Vulnerabilities (Secunia Research)
  
• Ziproxy Homepage (Ziproxy)