PT-2012-2448 · Ntr · Ntr Activex Control

Carsten Eiram · Publicado 2012-01-15 · Atualizado 2017-08-29 · CVE-2012-0266

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NTR ActiveX control versions prior to 2.0.4.8

Description The issue allows remote attackers to execute arbitrary code due to multiple stack-based buffer overflows. This can occur through various methods, including a long bstrUrl parameter to the StartModule method, a long bstrParams parameter to the Check method, or a long bstrUrl parameter to the Download or DownloadModule method during the construction of a .ntr pathname or a URL.

Recommendations For versions prior to 2.0.4.8, update to version 2.0.4.8 or later to resolve the issue. As a temporary workaround, consider restricting the length of the bstrUrl and bstrParams parameters to prevent buffer overflows. Additionally, restrict access to the StartModule, Check, Download, and DownloadModule methods to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0266

Produtos afetados

Ntr Activex Control

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ntr_activex_check_bof.rb · Exploit
• 🔥 http://exploit-db.com/exploits/21841 · Exploit
• 🔥 https://exploit-db.com/exploits/21841 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2012-01/0074.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72291 · Nota
• http://secunia.com/advisories/45166 · Nota
• http://osvdb.org/78252 · Nota
• http://secunia.com/secunia_research/2012-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72293 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72292 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0266 · Nota de Segurança