Photodex ProShow Producer 'load' File Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	54264
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 02 2012 12:00AM
Updated:	Oct 28 2013 06:20AM
Credit:	Julien Ahrens of Inshell Security
Vulnerable:
Not Vulnerable:

Photodex ProShow Producer 'load' File Remote Stack Buffer Overflow Vulnerability

Photodex ProShow Producer is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code. Failed attacks will cause denial-of-service conditions.

Photodex ProShow Producer 5.0.3256 is vulnerable; other versions may also be affected.

Photodex ProShow Producer 'load' File Remote Stack Buffer Overflow Vulnerability

The following proof of concept and exploit code are available:

• /data/vulnerabilities/exploits/54264.pl.txt
• /data/vulnerabilities/exploits/54264.rb.txt
• /data/vulnerabilities/exploits/54264_1.py.txt
• /data/vulnerabilities/exploits/54264.py

Photodex ProShow Producer 'load' File Remote Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Photodex ProShow Producer 'load' File Remote Stack Buffer Overflow Vulnerability

References: