SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	44535
Class:	Boundary Condition Error
CVE:	CVE-2010-2583
Remote:	Yes
Local:	No
Published:	Oct 29 2010 12:00AM
Updated:	Oct 29 2010 12:00AM
Credit:	Dmitriy Pletnev, Secunia Research.
Vulnerable:
Not Vulnerable:

SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

The SonicWALL SSL-VPN E-Class ActiveX control is prone to multiple buffer-overflow vulnerabilities because the application fails to adequately check boundaries on user-supplied input.

An attacker can exploit these issues to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed attacks will likely cause denial-of-service conditions.

These issues affects SonicWALL E-Class SSL-VPN 10.5.1.117 and all previous versions as well as 10.0.5 without hotfix; other versions may also be vulnerable.

SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has release patches. Please see the references for more information

SonicWALL SSL-VPN E-Class ActiveX Control Multiple Buffer Overflow Vulnerabilities

References:

• Home page (SonicWALL)
  
• HOTFIX INSTALLATION TECHNOTE (SonicWALL)
  
• Secunia Research: SonicWALL SSL-VPN End-Point ActiveX Control Buffer Overflow (Secunia Research)