PT-2015-5601 · Oracle · Webgate Winrds

Praveen Darshanam · Published 2015-02-27 · Updated 2016-11-30 · CVE-2015-2094

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebGate WinRDS (affected versions not specified)

Description The issue is a stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control, allowing remote attackers to execute arbitrary code. This can be achieved via unspecified vectors to the (1) PrintSiteImage, (2) PlaySiteAllChannel, (3) StopSiteAllChannel, or (4) SaveSiteImage function.

Recommendations As a temporary workaround, consider disabling the PrintSiteImage(), PlaySiteAllChannel(), StopSiteAllChannel(), and SaveSiteImage() functions until a patch is available. Restrict access to the WESPPlayback.WESPPlaybackCtrl.1 control to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-2094

ZDI-15-071

ZDI-15-072

ZDI-15-073

ZDI-15-074

Affected Products

Webgate Winrds

References · 17

• 🔥 https://exploit-db.com/exploits/36517 · Exploit
• 🔥 https://exploit-db.com/exploits/36604 · Exploit
• 🔥 http://packetstormsecurity.com/files/131069/WebGate-WinRDS-2.0.8-StopSiteAllChannel-Stack-Overflow.html · Exploit
• https://zerodayinitiative.com/advisories/ZDI-15-074 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-2094 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-073 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-072 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-071 · Security Note
• http://osvdb.org/118906 · Note
• http://osvdb.org/118908 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-071 · Note
• http://securityfocus.com/bid/72841 · Note
• http://osvdb.org/118905 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-072 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-073 · Note