Corel PDF Fusion CVE-2013-3248 Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	61010
Class:	Input Validation Error
CVE:	CVE-2013-3248
Remote:	Yes
Local:	No
Published:	Jul 08 2013 12:00AM
Updated:	Jul 23 2013 05:13AM
Credit:	Kaveh Ghaemmaghami via Secunia
Vulnerable:
Not Vulnerable:

Corel PDF Fusion CVE-2013-3248 Stack Based Buffer Overflow Vulnerability

Corel PDF Fusion is prone to a stack-based buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

Corel PDF Fusion 1.11 is vulnerable; other versions may also be affected.

Note: The issue described by CVE-2013-0742 has been moved to BID 61160 (Corel PDF Fusion CVE-2013-0742 Arbitrary Code Execution Vulnerability) for better documentation.

Corel PDF Fusion CVE-2013-3248 Stack Based Buffer Overflow Vulnerability

The following exploit code is available:

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product.

• /data/vulnerabilities/exploits/61010.rb

Corel PDF Fusion CVE-2013-3248 Stack Based Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Corel PDF Fusion CVE-2013-3248 Stack Based Buffer Overflow Vulnerability

References: