HP Photo Creative 'ContentMan.dll' ActiveX Control Buffer Overflow Vulnerability

Bugtraq ID:	45631
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 31 2010 12:00AM
Updated:	Dec 13 2011 07:38PM
Credit:	rgod
Vulnerable:	HP Photo Creative 2
Not Vulnerable:

HP Photo Creative 'ContentMan.dll' ActiveX Control Buffer Overflow Vulnerability

HP Photo Creative is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. The issue affects the 'audio.Record.1' ActiveX control.

Successful exploits will allow remote attackers to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.

HP Photo Creative 'ContentMan.dll' ActiveX Control Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/45631.html

HP Photo Creative 'ContentMan.dll' ActiveX Control Buffer Overflow Vulnerability

References:

• HP Photo Creative Homepage (HP)
  
• HP Photo Creative v 2.x audio.Record.1 ActiveX Control (ContentMan.dll 1.0.0.427 (rgod)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• HP Photo Creative v 2.x audio.Record.1 ActiveX Control (ContentMan.dll 1.0.0.42 ([email protected])
  
• Microsoft Security Bulletin MS11-090 (Microsoft)