Multiple EZPhotoShare Memory Corruption Vulnerabilities
BID:9150
Info
Multiple EZPhotoShare Memory Corruption Vulnerabilities
| Bugtraq ID: | 9150 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 03 2003 12:00AM |
| Updated: | Dec 03 2003 12:00AM |
| Credit: | Discovery of these vulnerabilities has been credited to Peter Winter-Smith. |
| Vulnerable: |
eZnetwork eZphotoshare 1.1 eZnetwork eZphotoshare 1.0 |
| Not Vulnerable: | |
Discussion
Multiple EZPhotoShare Memory Corruption Vulnerabilities
eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It has been reported that a remote attacker may overrun the bounds of a reserved buffer in eZphotoshare process memory by transmitting a number of malicious packets to the host that is running eZphotoshare.
This activity will ultimately result in the corruption of variables that are saved adjacent to the affected buffer. These variables are crucial to the operation of the vulnerable software.
eZphotoshare has been reported prone to multiple remote memory corruption vulnerabilities. The issues present themselves in the routines employed by eZphotoshare to handle network based communications. It has been reported that a remote attacker may overrun the bounds of a reserved buffer in eZphotoshare process memory by transmitting a number of malicious packets to the host that is running eZphotoshare.
This activity will ultimately result in the corruption of variables that are saved adjacent to the affected buffer. These variables are crucial to the operation of the vulnerable software.
Exploit / POC
Multiple EZPhotoShare Memory Corruption Vulnerabilities
The individual who discovered these vulnerabilities has reported that an exploit has been developed that will exploit this issue to remotely execute arbitrary code. This exploit is not believed to be public.
A proof of concept that will trigger the issue has been supplied.
The individual who discovered these vulnerabilities has reported that an exploit has been developed that will exploit this issue to remotely execute arbitrary code. This exploit is not believed to be public.
A proof of concept that will trigger the issue has been supplied.
Solution / Fix
Multiple EZPhotoShare Memory Corruption Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple EZPhotoShare Memory Corruption Vulnerabilities
References:
References:
- eZphotoshare Homepage (eZphotoshare)
- eZphotoshare Multiple Overflow Vulnerabilities ("Peter Winter-Smith"