AtHoc Toolbar Buffer Overflow and Format String Bugs Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1011554
|
|
SecurityTracker URL: http://securitytracker.com/id?1011554
|
|
CVE Reference: GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Oct 6 2004
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: NGSSoftware
|
Description: Two vulnerabilities were reported in the AtHoc Toolbar plug-in for Microsoft Internet Explorer. A remote user can execute arbitrary code.
NGSSoftware reported that there is a buffer overflow and a format string flaw in the toolbar software. A remote user can execute
arbitrary code on the target user's system with the privileges of the target user.
The affected software is distributed by eBay,
Accenture, ThomasRegister, ThomasRegional, Juniper Networks, WiredNews, CarFax, and Agile PLM.
Additional details will not be
dislcosed by NGSSoftware until January 2005.
|
Impact: A remote user can execute arbitrary code on the target user's system. The code will run with the privileges of the target user.
|
Solution: The vendor has released a fixed version.
|
Vendor URL: www.athoc.com/site/products/toolbar.asp (Links to External Site)
|
Cause: Boundary error, Input validation error, State error
|
Underlying OS: Windows (Any)
|
Reported By: "NGSSoftware Insight Security Research" <nisr@nextgenss.com>
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 6 Oct 2004 17:55:11 +0100
From: "NGSSoftware Insight Security Research" <nisr@nextgenss.com>
Subject: [VulnWatch] Patch available for high risk flaws in the AtHoc Toolbar
|
Mark Litchfield and John Heasman of NGSSoftware have discovered two high
risk vulnerabilities in the AtHoc Toolbar. The AtHoc toolbar is a plugin for
Microsoft's Internet Explorer. The toolbar is redistributed to users of
eBay
Accenture
ThomasRegister
ThomasRegional
Juniper Networks
WiredNews
CarFax
Agile PLM
The flaws, that include a remotely exploitable buffer overflow and a format
string bug, have been fixed by AtHoc and an updated toolbar has been
distributed to the affected companies. Clients of any of the companies
listed above that have installed the toolbar should ensure that they
download the updated version.
NGSSoftware are going to withhold details about these flaws for three
months. Full details will be published on the 6th of January 2005. This
three month window will allow users of the toolbar the time needed to obtain
the updated version before the details are released to the general public.
This reflects NGSSoftware's new approach to responsible disclosure.
NGSSoftware Insight Security Research
http://www.databasesecurity.com/
http://www.nextgenss.com/
+44(0)208 401 0070
|
|
