|
|
|
|
| |
Credit:
The information has been provided by iDefense.
The original article can be found at:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=623
|
| |
Vulnerable Systems:
* America Online's AmpX.dll version 2.6.1.11
(Other versions are suspected to be vulnerable)
Several methods within the vulnerable ActiveX control (CLSID B49C4597-8721-4789-9250-315DFBD9F525) were found to be vulnerable to stack-based buffer overflows. In each case, variable length attacker supplied data is copied into a fixed-size stack buffer using the strcpy() function. Since no input validation is performed, it is possible to corrupt stack memory, resulting in an exploitable condition.
Exploitation allows an attacker to execute arbitrary code in the context of the user viewing a malicious web page. In order to be successful, the attacker must persuade a user with the vulnerable control installed into viewing a malicious web page. No further interaction is required.
Workaround:
In order to prevent exploitation of this vulnerability, an administrator can set the kill-bit for the vulnerable control. While this does not fix the vulnerability, it does prevent the control from being loaded in Internet Explorer.
Vendor Status:
"An updated version of AOL Radio with enhanced security features is now available. AOL recommends that you download and install the update to get the best and most secure performance from AOL Radio. If you use AIM or other AOL software, you will automatically receive a prompt to update AOL Radio and you do not need to download and install this update now. Otherwise, please download the update from the URL below and double-click on the file to finish updating AOL Radio:
http://radaol-prod-web-rr.streamops.aol.com/mediaplugin/unagi_patch.exe"
CVE Information:
CVE-2007-5755
|
|
|
|
|
