|
|
| |
GO-Global for Windows is "a server-based thin-client solution. It allows users to run 32-bit Windows applications remotely from a server, the application runs entirely on the server but is displayed on the client".
A buffer overflow vulnerability exists in GO-Global when initial handshake is done. |
| |
Credit:
The information has been provided by Luigi Auriemma.
The original article can be found at: http://aluigi.altervista.org/adv/ggwbof-adv.txt
|
| |
Vulnerable Systems:
* GO-Global for Windows versions 3.1.0.3270 and prior
Immune Systems:
* GO-Global for Windows version 3.1.0.3281
After the initial handshake where is specified the type of encryption to use (_USERSA_), the application uses 16 bit fields for specifying the length of the subsequent data blocks. Both the client and the server use a small buffer which leads to a buffer-overflow if an attacker uses a data block longer than its size. Both server and clients are vulnerable.
Proof of Concept:
For testing the "GO-Global for Windows" server:
http://aluigi.altervista.org/poc/ggwbof.zip
For testing the "GO-Global for Windows" clients:
http://aluigi.altervista.org/poc/ggwbofc.zip
|
|
|
