PT-2014-2713 · Chasys · Flt Bmp.Dll+1

Publicado 2014-03-11 · Atualizado 2017-08-29 · CVE-2013-3928

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Chasys Draw IES versions prior to 4.11.02

Description The issue is related to a stack-based buffer overflow in the ReadFile function in flt BMP.dll. This occurs when processing crafted biPlanes and biBitCount fields in a BMP file, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 4.11.02, update to version 4.11.02 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-3928

Produtos afetados

Chasys Draw Ies

Flt Bmp.Dll

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/chasys_draw_ies_bmp_bof.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/27609 · Exploit
• 🔥 http://exploit-db.com/exploits/27609 · Exploit
• https://docs.google.com/file/d/0BzyiGAtMizMtSFF4ZWVCMHNVVGs/edit?usp=sharing · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86035 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3928 · Nota de Segurança
• http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html · Nota
• http://securityfocus.com/bid/61463 · Nota
• http://jpchacha.com/chasysdraw/help.php?file=history.htm · Nota
• http://secunia.com/advisories/53773 · Aviso do Fabricante