Ubisoft Uplay ActiveX Control Buffer Overflow Vulnerability
BID:54867
Info
Ubisoft Uplay ActiveX Control Buffer Overflow Vulnerability
| Bugtraq ID: | 54867 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2012-4177 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 07 2012 12:00AM |
| Updated: | Aug 09 2012 04:22PM |
| Credit: | Tavis Ormandy |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Ubisoft Uplay ActiveX Control Buffer Overflow Vulnerability
Ubisoft Uplay ActiveX Control is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds check user-supplied input.
Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.
Uplay 2.0.3 is vulnerable; other versions may also be affected.
Ubisoft Uplay ActiveX Control is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds check user-supplied input.
Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.
Uplay 2.0.3 is vulnerable; other versions may also be affected.
Exploit / POC
Ubisoft Uplay ActiveX Control Buffer Overflow Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Ubisoft Uplay ActiveX Control Buffer Overflow Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Ubisoft Uplay ActiveX Control Buffer Overflow Vulnerability
References:
References: