Steema Software TeeChart Pro ActiveX control Integer Overflow Vulnerability

Bugtraq ID:	61927
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 21 2013 12:00AM
Updated:	Aug 21 2013 12:00AM
Credit:	Unknown
Vulnerable:
Not Vulnerable:

Steema Software TeeChart Pro ActiveX control Integer Overflow Vulnerability

Steema Software TeeChart Pro is prone to an integer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits will allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

TeeChart Pro versions prior to 2011.0.0.5 are vulnerable.

Steema Software TeeChart Pro ActiveX control Integer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Steema Software TeeChart Pro ActiveX control Integer Overflow Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Steema Software TeeChart Pro ActiveX control Integer Overflow Vulnerability

References:

• TeeChart Homepage (Steema Software )
  
• Steema Software TeeChart Pro ActiveX Control Integer Overflow Vulnerability (Cisco)