ppthtml CVE-2013-4565 Heap-based Buffer Overflow Vulnerability
BID:63717
Info
ppthtml CVE-2013-4565 Heap-based Buffer Overflow Vulnerability
| Bugtraq ID: | 63717 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-4565 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 10 2013 12:00AM |
| Updated: | Nov 10 2013 12:00AM |
| Credit: | Murray McAllister |
| Vulnerable: |
ppthtml ppthtml 0.5.1-6 |
| Not Vulnerable: | |
Discussion
ppthtml CVE-2013-4565 Heap-based Buffer Overflow Vulnerability
The ppthtml is prone to a heap-based buffer overflow vulnerability because it fails to properly bounds check user-supplied data.
An attacker can exploit this issue to execute arbitrary code in the context of the application using the affected function. Failed exploit attempts will likely crash the application.
ppthtml 0.5.1-6 is vulnerable; other versions may also be vulnerable.
The ppthtml is prone to a heap-based buffer overflow vulnerability because it fails to properly bounds check user-supplied data.
An attacker can exploit this issue to execute arbitrary code in the context of the application using the affected function. Failed exploit attempts will likely crash the application.
ppthtml 0.5.1-6 is vulnerable; other versions may also be vulnerable.
Exploit / POC
ppthtml CVE-2013-4565 Heap-based Buffer Overflow Vulnerability
An attacker can exploit this issue via readily available tools.
An attacker can exploit this issue via readily available tools.
Solution / Fix
ppthtml CVE-2013-4565 Heap-based Buffer Overflow Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].