Convert-UUlib 'UURepairData()' Function Buffer Overflow Vulnerability

Bugtraq ID:	45925
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 14 2010 12:00AM
Updated:	May 07 2015 05:16PM
Credit:	Marco Walther
Vulnerable:	Convert-UUlib Convert-UUlib 1.33 + UUDeview UUDeview 0.5.20
Not Vulnerable:	Convert-UUlib Convert-UUlib 1.34 + UUDeview UUDeview 0.5.20

Convert-UUlib 'UURepairData()' Function Buffer Overflow Vulnerability

Convert-UUlib is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers may leverage this issue to execute arbitrary code in the context of the application using the vulnerable library. Failed attacks will cause denial-of-service conditions.

Versions prior to Convert-UUlib 1.34 are vulnerable.

Convert-UUlib 'UURepairData()' Function Buffer Overflow Vulnerability

Currently we are not aware of any working exploit. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Convert-UUlib 'UURepairData()' Function Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Convert-UUlib 'UURepairData()' Function Buffer Overflow Vulnerability

References:

• Changelog (Marc Lehmann)
  
• Convert-UUlib CPAN Page (Marc Lehmann )