PT-2010-2502 · Luxology · Modo

Publicado 2010-03-03 · Atualizado 2018-10-10 · CVE-2010-0766

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Luxology Modo version 401

Description The issue is related to an integer overflow in the Swap4 function in valet4.dll, which allows remote attackers to execute arbitrary code. This can be achieved through a .LXO file containing a CHNL subchunk associated with an invalid length.

Recommendations For Luxology Modo version 401, update to a version that fixes the integer overflow issue in the Swap4 function.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-0766

Produtos afetados

Modo

Referências · 7

• 🔥 http://coresecurity.com/content/luxology-modo-lxo-vulnerability · Exploit
• http://securityfocus.com/archive/1/509843/100/0/threaded · Nota
• http://securityfocus.com/bid/38460 · Nota
• http://osvdb.org/62669 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0766 · Nota de Segurança
• http://secunia.com/advisories/38784 · Nota
• http://securityfocus.com/archive/1/509810/100/0/threaded · Nota