PT-2009-4265 · Chinagames · Chinagames Igame 2009+2

Bugvuln + 1 · Published 2009-05-28 · Updated 2009-05-28 · CVE-2009-1800

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Chinagames iGame 2009 versions 1.x

Description: A stack-based buffer overflow issue exists in the Chinagames CGAgent ActiveX control, allowing remote attackers to execute arbitrary code via a long argument to the CreateChinagames method. This issue has been exploited in the wild in April and May 2009.

Recommendations: For Chinagames iGame 2009 version 1.x, consider disabling the CreateChinagames method in the CGAgent ActiveX control as a temporary workaround until a patch is available. Restrict access to the CGAgent.dll module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1800

Affected Products

Cgagent Activex Control

Cgagent.Dll

Chinagames Igame 2009

References · 8

• 🔥 http://securityfocus.com/bid/34871 · Exploit
• 🔥 http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html · Exploit
• 🔥 https://exploit-db.com/exploits/8758 · Exploit
• 🔥 http://bbs.pediy.com/showthread.php?t=87615 · Exploit
• 🔥 http://cisrt.org/enblog/read.php?245 · Exploit
• 🔥 http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html · Exploit
• http://secunia.com/advisories/35005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1800 · Security Note