Flash Slideshow Maker '.fss' File Multiple Heap Buffer Overflow Vulnerabilities

Bugtraq ID:	41290
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 01 2010 12:00AM
Updated:	Jul 05 2010 06:47AM
Credit:	Bui Quang Minh and Secunia Research
Vulnerable:	Flash Slideshow Maker Flash Slideshow Maker 5.0
Not Vulnerable:

Flash Slideshow Maker '.fss' File Multiple Heap Buffer Overflow Vulnerabilities

Flash Slideshow Maker is prone to multiple remote heap-based buffer-overflow vulnerabilities because it fails to properly bounds check user-supplied data.

Attackers can exploit these issues to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

Flash Slideshow Maker 5.0 is vulnerable; other versions may also be affected.

Flash Slideshow Maker '.fss' File Multiple Heap Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Flash Slideshow Maker '.fss' File Multiple Heap Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Flash Slideshow Maker '.fss' File Multiple Heap Buffer Overflow Vulnerabilities

References:

• Flash Slideshow Maker Homepage (Flash Slideshow Maker)
  
• Vulnerability in Flash Slideshow Maker (Bui Quang Minh)