SureThing CD/DVD Labeler Playlist Parsing Remote Buffer Overflow Vulnerability

Bugtraq ID:	43852
Class:	Boundary Condition Error
CVE:	CVE-2009-2225
Remote:	Yes
Local:	No
Published:	Jun 24 2009 12:00AM
Updated:	Jan 05 2011 08:32PM
Credit:	Parvez Anwar
Vulnerable:	MicroVision Development SureThing CD/DVD Labeler 5.1.616
Not Vulnerable:	MicroVision Development SureThing CD/DVD Labeler 5.2.647.0

SureThing CD/DVD Labeler Playlist Parsing Remote Buffer Overflow Vulnerability

SureThing CD/DVD Labeler is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed exploit attempts may result in a denial-of-service condition.

SureThing CD/DVD Labeler 5.1.616 is vulnerable; other versions may also be affected.

SureThing CD/DVD Labeler Playlist Parsing Remote Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/43683.pl

SureThing CD/DVD Labeler Playlist Parsing Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please contact the vendor for more information.

SureThing CD/DVD Labeler Playlist Parsing Remote Buffer Overflow Vulnerability

References:

• SureThing CD/DVD Labeler Homepage (MicroVision Development)