Native Instruments Multiple Products DLL Loading Arbitrary Code Execution Vulnerability
BID:44989
Info
Native Instruments Multiple Products DLL Loading Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 44989 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 19 2010 12:00AM |
| Updated: | Nov 22 2010 09:26AM |
| Credit: | Gjoko Krstic |
| Vulnerable: |
Native Instruments Service Center 2.2.5 Native Instruments REAKTOR 5 PLAYER 5.5.1 10584 Native Instruments KONTAKT 4 PLAYER 4.1.3 4125 Native Instruments Guitar Rig 4 Player 4.1.1 |
| Not Vulnerable: | |
Discussion
Native Instruments Multiple Products DLL Loading Arbitrary Code Execution Vulnerability
Multiple products from Native Instruments are prone to multiple vulnerabilities that let attackers execute arbitrary code.
An attacker can exploit these issues by enticing a legitimate user to use a vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
The issues affect the following:
Guitar Rig 4 Player 4.1.1
KONTAKT 4 PLAYER 4.1.3.4125
Service Center 2.2.5
REAKTOR 5 PLAYER 5.5.1.10584
Multiple products from Native Instruments are prone to multiple vulnerabilities that let attackers execute arbitrary code.
An attacker can exploit these issues by enticing a legitimate user to use a vulnerable application to open a file from a network share location that contains a specially crafted Dynamic Link Library (DLL) file.
The issues affect the following:
Guitar Rig 4 Player 4.1.1
KONTAKT 4 PLAYER 4.1.3.4125
Service Center 2.2.5
REAKTOR 5 PLAYER 5.5.1.10584
Exploit / POC
Native Instruments Multiple Products DLL Loading Arbitrary Code Execution Vulnerability
Attackers must entice an unsuspecting user to open a file on a remote WebDAV or SMB share to exploit these issues.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
The following exploit code is available:
Attackers must entice an unsuspecting user to open a file on a remote WebDAV or SMB share to exploit these issues.
A general exploit technique has been documented by TheLeader and H.D. Moore for the Metasploit Project; please see the references for more information.
The following exploit code is available:
Solution / Fix
Native Instruments Multiple Products DLL Loading Arbitrary Code Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Native Instruments Multiple Products DLL Loading Arbitrary Code Execution Vulnerability
References:
References:
- Native Instruments Guitar Rig 4 Player v4.1.1 Insecure Library Loading Vulnerab (Gjoko Krstic)
- Application DLL Load Hijacking (HD Moore)
- Exploiting DLL Hijacking Flaws (hdm)
- Guitar Rig 4 Player Homepage (Native Instruments)
- Microsoft Security Advisory 2269637 Released (Microsoft)
- More information about the DLL Preloading remote attack vector (Microsoft)
- Native Instruments Kontakt 4 Player v4.1.3 Insecure Library Loading Vulnerabilit (Zero Science Lab)
- Native Instruments Reaktor 5 Player v5.5.1 Insecure Library Loading Vulnerabilit (Zero Science Lab)
- Native Instruments Service Center 2.2.5 Insecure Library Loading Vulnerability (Zero Science Lab)
- Microsoft Security Advisory (2269637) (Microsoft)