WESP SDK 'WESPConfig' ActiveX Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	72727
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 24 2015 12:00AM
Updated:	Feb 24 2015 12:00AM
Credit:	Praveen D
Vulnerable:
Not Vulnerable:

WESP SDK 'WESPConfig' ActiveX Multiple Buffer Overflow Vulnerabilities

WESP SDK is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit these issues to execute arbitrary code in the context of the application (typically Internet Explorer) using the ActiveX control. Failed exploit attempts will likely result in denial-of-service conditions.

WESP SDK 'WESPConfig' ActiveX Multiple Buffer Overflow Vulnerabilities

The researcher who discovered these issues has created a proof-of-concept. Please see the references for more information.

WESP SDK 'WESPConfig' ActiveX Multiple Buffer Overflow Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

WESP SDK 'WESPConfig' ActiveX Multiple Buffer Overflow Vulnerabilities

References: