IBM HomePagePrint Buffer Overflow Vulnerability

Bugtraq ID:	763
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Nov 02 1999 12:00AM
Updated:	Nov 02 1999 12:00AM
Credit:	This vulnerability was posted to Bugtraq by UNYUN <[email protected]>.
Vulnerable:	IBM HomePagePrint 1.0 7
Not Vulnerable:

IBM HomePagePrint Buffer Overflow Vulnerability

Certain versions of the IBM Web page printout software "IBM HomePagePrint " can in some instances be remotely exploited by malicious webservers. The problem lies in a buffer overflow in the code which handles IMG_SRC tags. If a page containing a specially constructed IMG SRC tag is previewed or printed using the IBM HomePagePrint software, arbitrary code can be run on the client.

IBM HomePagePrint Buffer Overflow Vulnerability

This exploit will generate an HTML document that contains an IMG SRC tag that will overflow the buffer. This exploit will only work for Windows98 clients, but can be easily modified for 95 and NT.

• /data/vulnerabilities/exploits/ex_homepageprint.c

IBM HomePagePrint Buffer Overflow Vulnerability

Solution:
Patch is available at:
http://www.ibm.co.jp/software/internet/hpgprt/down2.html

IBM HomePagePrint Buffer Overflow Vulnerability

References:

• Penguin Toolbox #45 (Shadow Penguin Security)
  
• Sample Exploit Page (Shadow Penguin Security)