AoA MP4 Converter 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

Bugtraq ID:	67491
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 20 2014 12:00AM
Updated:	May 20 2014 12:00AM
Credit:	metacom
Vulnerable:
Not Vulnerable:

AoA MP4 Converter 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

AoA MP4 Converter is prone to a buffer-overflow vulnerability because the applications fail to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of an application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in a denial-of-service condition.

AoA MP4 Converter 4.1.2 is vulnerable; other versions may also be affected.

AoA MP4 Converter 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/67491.html.txt

AoA MP4 Converter 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AoA MP4 Converter 'InitLicenKeys()' ActiveX Control Buffer Overflow Vulnerability

References:

• Vendor Homepage (AoAMedia)