Multiple Cytel Products Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	49924
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 03 2011 12:00AM
Updated:	Oct 24 2011 04:52PM
Credit:	Luigi Auriemma
Vulnerable:	Cytel Studio 9 Cytel StatXact 9 Cytel LogXact 9 Cytel CrossOver 9
Not Vulnerable:

Multiple Cytel Products Remote Buffer Overflow Vulnerabilities

Multiple Cytel products are prone to multiple buffer-overflow vulnerabilities.

Successful exploits can allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

These issues affect the following products:

Cytel Studio 9
Cytel StatXact 9
Cytel LogXact 9
Cytel CrossOver 9

Multiple Cytel Products Remote Buffer Overflow Vulnerabilities

A proof of concept file is available. Please see the references for information.

Multiple Cytel Products Remote Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Cytel Products Remote Buffer Overflow Vulnerabilities

References:

• Cytel Homepage (Cytel)
  
• Vulnerabilities in Cytel Studio 9 (Luigi Auriemma)
  
• Vulnerabilities in Cytel Studio 9 (Luigi Auriemma)