TeeChart Professional ActiveX Remote Integer Overflow Vulnerability

Bugtraq ID:	49125
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 11 2011 12:00AM
Updated:	Mar 19 2015 09:46AM
Credit:	Steven Seeley
Vulnerable:	Unitronics OPC Server 1.3.8 Steema Software TeeChart8.ocx 8.0.0.8 Steema Software TeeChart7.ocx 7.0.1.4 Steema Software TeeChart6.ocx 6.0.0.5 Steema Software TeeChart5.ocx 5.0.1.0 Steema Software TeeChart2010.ocx 2010.0.0.3 BACnet Operator Workstation 1.0.76
Not Vulnerable:

TeeChart Professional ActiveX Remote Integer Overflow Vulnerability

TeeChart Professional ActiveX control is prone to an integer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the application running the ActiveX control (typically Internet Explorer). Failed exploit attempts may cause denial-of-service conditions.

TeeChart Professional ActiveX Remote Integer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/49125.rb

TeeChart Professional ActiveX Remote Integer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TeeChart Professional ActiveX Remote Integer Overflow Vulnerability

References:

• Borland Homepage (Borland)
  
• Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Exe (Bugtraq)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• TeeChart Homepage (Steema Software )
  
• TeeChart Professional Interger Overflow (Steven Seeley)