SigPlus Pro ActiveX Control Multiple Vulnerabilities
BID:46128
Info
SigPlus Pro ActiveX Control Multiple Vulnerabilities
| Bugtraq ID: | 46128 |
| Class: | Unknown |
| CVE: |
CVE-2011-0323 CVE-2011-0324 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 03 2011 12:00AM |
| Updated: | Feb 03 2011 12:00AM |
| Credit: | Dmitriy Pletnev, Secunia Research |
| Vulnerable: |
Topaz Systems SigPlus Pro 3.95 |
| Not Vulnerable: |
Topaz Systems SigPlus Pro 4.29 |
Discussion
SigPlus Pro ActiveX Control Multiple Vulnerabilities
The SigPlus Pro ActiveX control is prone to multiple vulnerabilities.
Successfully exploiting these issues allows remote attackers to create or overwrite arbitrary local files and to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition.
SigPlus Pro 3.95 is vulnerable; other versions may also be affected.
The SigPlus Pro ActiveX control is prone to multiple vulnerabilities.
Successfully exploiting these issues allows remote attackers to create or overwrite arbitrary local files and to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition.
SigPlus Pro 3.95 is vulnerable; other versions may also be affected.
Exploit / POC
SigPlus Pro ActiveX Control Multiple Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web page.
To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web page.
Solution / Fix
SigPlus Pro ActiveX Control Multiple Vulnerabilities
Solution:
Reportedly, the vendor released an update to address the issue; however, Symantec has not confirmed it. Please contact the vendor for more information.
Solution:
Reportedly, the vendor released an update to address the issue; however, Symantec has not confirmed it. Please contact the vendor for more information.
References
SigPlus Pro ActiveX Control Multiple Vulnerabilities
References:
References: