Sielco Sistemi Multiple Products Buffer Overflow Vulnerability

Bugtraq ID:	50932
Class:	Boundary Condition Error
CVE:	CVE-2011-4037
Remote:	Yes
Local:	No
Published:	Dec 06 2011 12:00AM
Updated:	Dec 06 2011 12:00AM
Credit:	Paul Davis
Vulnerable:	SIELCO SISTEMI Winlog Pro 2.7.1 SIELCO SISTEMI Winlog Pro 2.7
Not Vulnerable:	SIELCO SISTEMI Winlog Pro 2.7.9 SIELCO SISTEMI Winlog Lite 2.7.9

Sielco Sistemi Multiple Products Buffer Overflow Vulnerability

Winlog Pro and Winlog Lite are prone to a remote buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the application using the vulnerable control. Failed exploit attempts will result in a denial-of-service condition.

Sielco Sistemi Multiple Products Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sielco Sistemi Multiple Products Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Sielco Sistemi Multiple Products Buffer Overflow Vulnerability

References:

• Winlog Pro Homepage (SIELCO SISTEMI)
  
• ICSA-11-298-01�??SIELCO SYSTEMI WINLOG BUFFER OVERFLOW (Paul Davis)