PT-2014-2713 · Chasys · Flt Bmp.Dll+1

Published 2014-03-11 · Updated 2017-08-29 · CVE-2013-3928

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Chasys Draw IES versions prior to 4.11.02

Description The issue is related to a stack-based buffer overflow in the ReadFile function in flt BMP.dll. This occurs when processing crafted biPlanes and biBitCount fields in a BMP file, allowing remote attackers to execute arbitrary code.

Recommendations For versions prior to 4.11.02, update to version 4.11.02 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-3928

Affected Products

Chasys Draw Ies

Flt Bmp.Dll

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/chasys_draw_ies_bmp_bof.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/122810/Chasys-Draw-IES-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/27609 · Exploit
• 🔥 http://exploit-db.com/exploits/27609 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3928 · Security Note
• http://secunia.com/advisories/53773 · Vendor Advisory
• https://docs.google.com/file/d/0BzyiGAtMizMtSFF4ZWVCMHNVVGs/edit?usp=sharing · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86035 · Note
• http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html · Note
• http://securityfocus.com/bid/61463 · Note
• http://jpchacha.com/chasysdraw/help.php?file=history.htm · Note