Sony PC Companion Multiple Stack Based Buffer Overflow Vulnerabilities

Bugtraq ID:	57016
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 20 2012 12:00AM
Updated:	Dec 20 2012 12:00AM
Credit:	Gjoko Krstic
Vulnerable:
Not Vulnerable:

Sony PC Companion Multiple Stack Based Buffer Overflow Vulnerabilities

Sony PC Companion is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary-checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.

Sony PC Companion 2.10.115 and 2.10.108 are vulnerable.

Sony PC Companion Multiple Stack Based Buffer Overflow Vulnerabilities

Proof-of-concepts are available; please see the references for more information.

Sony PC Companion Multiple Stack Based Buffer Overflow Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Sony PC Companion Multiple Stack Based Buffer Overflow Vulnerabilities

References: