PT-2009-4057 · Lateral Arts · Lateral Arts Photobox Uploader Activex Control

Publicado 2009-12-03 · Atualizado 2018-10-10 · CVE-2009-1567

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Lateral Arts Photobox uploader ActiveX control versions 1.x through 1.2 Lateral Arts Photobox uploader ActiveX control version 2.2.0.6

Description: The issue is related to multiple stack-based buffer overflows in the Lateral Arts Photobox uploader ActiveX control. Remote attackers can execute arbitrary code via a long URL string for certain property values, including LogURL, ConnectURL, SkinURL, AlbumCreateURL, ErrorURL, or httpsinglehost.

Recommendations: For Lateral Arts Photobox uploader ActiveX control versions 1.x through 1.2, update to version 1.3 or later. For Lateral Arts Photobox uploader ActiveX control version 2.2.0.6, consider disabling the ActiveX control until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1567

Produtos afetados

Lateral Arts Photobox Uploader Activex Control

Referências · 8

• http://vupen.com/english/advisories/2009/3376 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3377 · Nota
• http://securityfocus.com/bid/37187 · Nota
• http://secunia.com/advisories/37138 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1567 · Nota de Segurança
• http://secunia.com/secunia_research/2009-41 · Aviso do Fabricante
• http://securityfocus.com/archive/1/508169/100/0/threaded · Nota
• http://secunia.com/advisories/37492 · Aviso do Fabricante