KingView Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	45727
Class:	Boundary Condition Error
CVE:	CVE-2011-0406
Remote:	Yes
Local:	No
Published:	Jan 09 2011 12:00AM
Updated:	Mar 16 2011 02:07PM
Credit:	Dillon Beresford
Vulnerable:	Wellintech KingView 6.53
Not Vulnerable:

KingView Heap Based Buffer Overflow Vulnerability

KingView is prone to a heap-based buffer-overflow vulnerability because it fails to properly validate user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

KingView 6.53 is vulnerable; other versions may also be affected.

KingView Heap Based Buffer Overflow Vulnerability

The following proof-of-concept and exploit code are available:

• /data/vulnerabilities/exploits/45727.py
• /data/vulnerabilities/exploits/45727.rb

KingView Heap Based Buffer Overflow Vulnerability

Solution:
The vendor has made a patch available. Please see the references for more information.

KingView Heap Based Buffer Overflow Vulnerability

References:

• KingView Homepage (Wellintech)
  
• KingView patch nettransdll.dll (Wellintech)
  
• Waking up the sleeping dragon (D1LN)
  
• Vulnerability Note VU#180119 WellinTech KingView 6.53 remote heap overflow vulne (US-CERT)