RETIRED: WinGraphviz 'WinGraphviz.dll' Heap Buffer Overflow Vulnerability

Bugtraq ID:	54458
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 16 2012 12:00AM
Updated:	Jul 25 2012 08:51PM
Credit:	coolkaveh
Vulnerable:
Not Vulnerable:

WinGraphviz 'WinGraphviz.dll' Heap Buffer Overflow Vulnerability

WinGraphviz is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will likely cause denial-of-service conditions.

Note: This issue was previously titled 'Beyond Security beSTORM 'WinGraphviz.dll' ActiveX Control Heap Buffer Overflow Vulnerability'. The title and technical details have been changed to better reflect the underlying component affected.

RETIRED: WinGraphviz 'WinGraphviz.dll' Heap Buffer Overflow Vulnerability

The following example data is available:

• /data/vulnerabilities/exploits/54458.txt

WinGraphviz 'WinGraphviz.dll' Heap Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

RETIRED: WinGraphviz 'WinGraphviz.dll' Heap Buffer Overflow Vulnerability

References: