PT-2010-2502 · Luxology · Modo

Published 2010-03-03 · Updated 2018-10-10 · CVE-2010-0766

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Luxology Modo version 401

Description The issue is related to an integer overflow in the Swap4 function in valet4.dll, which allows remote attackers to execute arbitrary code. This can be achieved through a .LXO file containing a CHNL subchunk associated with an invalid length.

Recommendations For Luxology Modo version 401, update to a version that fixes the integer overflow issue in the Swap4 function.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2010-0766

Affected Products

Modo

References · 7

• 🔥 http://coresecurity.com/content/luxology-modo-lxo-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0766 · Security Note
• http://securityfocus.com/archive/1/509843/100/0/threaded · Note
• http://securityfocus.com/bid/38460 · Note
• http://osvdb.org/62669 · Note
• http://secunia.com/advisories/38784 · Note
• http://securityfocus.com/archive/1/509810/100/0/threaded · Note