Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
BID:41026
Info
Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
| Bugtraq ID: | 41026 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-2440 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2010 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Blake |
| Vulnerable: |
upRedSun Corporation Subtitle Translation Wizard 3.0 |
| Not Vulnerable: | |
Discussion
Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
Subtitle Translation Wizard is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
Subtitle Translation Wizard 3.0 is vulnerable; other versions may also be affected.
Subtitle Translation Wizard is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.
An attacker could exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
Subtitle Translation Wizard 3.0 is vulnerable; other versions may also be affected.
Exploit / POC
Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
The following proof-of-concept is available:
The following proof-of-concept is available:
Solution / Fix
Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
Subtitle Translation Wizard '.srt' File Stack Based Buffer Overflow Vulnerability
References:
References:
- Subtitle Translation Wizard Homepage (upRedSun Corporation)