Visan RocketLife audio.Record ActiveX Control Multiple Buffer Overflow Vulnerabilities
BID:45645
Info
Visan RocketLife audio.Record ActiveX Control Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 45645 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 03 2011 12:00AM |
| Updated: | Dec 13 2011 07:38PM |
| Credit: | Originally reported in HP Photo Creations by rgod. |
| Vulnerable: |
Visan RocketLife 1.0 4272 |
| Not Vulnerable: | |
Discussion
Visan RocketLife audio.Record ActiveX Control Multiple Buffer Overflow Vulnerabilities
Visan RocketLife 'audio.Record' ActiveX is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit these issues to execute arbitrary code in the context of an application (typically Internet Explorer) using the ActiveX control. Failed attacks will likely cause denial-of-service conditions.
NOTE: These issues may be related to the vulnerability discussed in BID 45631 (HP Photo Creative 'ContentMan.dll' ActiveX Control Buffer Overflow Vulnerability).
Visan RocketLife 'audio.Record' ActiveX is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit these issues to execute arbitrary code in the context of an application (typically Internet Explorer) using the ActiveX control. Failed attacks will likely cause denial-of-service conditions.
NOTE: These issues may be related to the vulnerability discussed in BID 45631 (HP Photo Creative 'ContentMan.dll' ActiveX Control Buffer Overflow Vulnerability).
Exploit / POC
Visan RocketLife audio.Record ActiveX Control Multiple Buffer Overflow Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web page.
To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web page.
Solution / Fix
Visan RocketLife audio.Record ActiveX Control Multiple Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Visan RocketLife audio.Record ActiveX Control Multiple Buffer Overflow Vulnerabilities
References:
References:
- RocketLife Homepage (Visan)
- Microsoft Security Bulletin MS11-090 (Microsoft)