Synactis PDF In-The-Box ActiveX Component Stack Based Buffer Overflow Vulnerability
BID:60238
Info
Synactis PDF In-The-Box ActiveX Component Stack Based Buffer Overflow Vulnerability
| Bugtraq ID: | 60238 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 30 2013 12:00AM |
| Updated: | Jun 11 2013 08:06AM |
| Credit: | Hicham "h1ch4m" Oumounid |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Synactis PDF In-The-Box ActiveX Component Stack Based Buffer Overflow Vulnerability
Synactis PDF In-The-Box ActiveX component is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.
Note: This issue was previously titled 'Logic Print 2013 PDF In-The-Box ActiveX Control Stack Based Buffer Overflow Vulnerability'. The title and technical details have been changed to better reflect the underlying component affected.
Synactis PDF In-The-Box ActiveX component is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.
Successful exploits allow remote attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.
Note: This issue was previously titled 'Logic Print 2013 PDF In-The-Box ActiveX Control Stack Based Buffer Overflow Vulnerability'. The title and technical details have been changed to better reflect the underlying component affected.
Exploit / POC
Synactis PDF In-The-Box ActiveX Component Stack Based Buffer Overflow Vulnerability
The following exploit codes are available:
The following exploit codes are available:
Solution / Fix
Synactis PDF In-The-Box ActiveX Component Stack Based Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Synactis PDF In-The-Box ActiveX Component Stack Based Buffer Overflow Vulnerability
References:
References: