Witness Systems eQuality 'Unify2.exe' Stack Buffer Overflow Vulnerability

Bugtraq ID:	49438
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 02 2011 12:00AM
Updated:	Sep 02 2011 12:00AM
Credit:	AbdulAziz Hariri of ThirdEyeTesters through TippingPoint Zero Day Initiative.
Vulnerable:	Witness Systems eQuality 0 Nortel Contact Recording and Quality Monitoring 0
Not Vulnerable:

Witness Systems eQuality 'Unify2.exe' Stack Buffer Overflow Vulnerability

eQuality is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks.

An attacker could exploit this issue to execute arbitrary code in the context of the SYSTEM user. Failed exploit attempts will likely result in denial-of-service conditions.

Witness Systems eQuality 'Unify2.exe' Stack Buffer Overflow Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Witness Systems eQuality 'Unify2.exe' Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Witness Systems eQuality 'Unify2.exe' Stack Buffer Overflow Vulnerability

References:

• eQuality Homepage (Witness Systems)
  
• (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability (TippingPoint Zero Day Initiative)