VeriSign Go Secure! Stack Overflow in ConfigChk ActiveX Control Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1017693
|
|
SecurityTracker URL: http://securitytracker.com/id?1017693
|
|
CVE Reference: CVE-2007-1083
(Links to External Site)
|
Updated: Feb 23 2007
|
Original Entry Date: Feb 22 2007
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: iDEFENSE
|
Description: A vulnerability was reported in VeriSign Go Secure! A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a stack overflow in the VerCompare()
method of the ConfigChk ActiveX control (VSCnfChk.dll) and execute arbitrary code on the target system. The code will run with the
privileges of the target user.
Version 2.0.0.2 of 'VSCnfChk.dll' is affected and prior versions may also be affected.
The
CLSID of this control is 08F04139-8DFC-11D2-80E9-006008B066EE.
David D. Rude II of iDefense discovered this vulnerability.
The
vendor was notified on December 22, 2006.
The original advisory is available at:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
[Editor
's note: iDefense is owned by VeriSign.]
|
Impact: A remote user can create HTML that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution: The vendor has issued a patch.
The VeriSign advisory is available at:
http://www.verisign.com/support/advisories/page_040740.html
|
Vendor URL: www.verisign.com/support/advisories/page_040740.html (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 22 Feb 2007 17:29:49 -0500
Subject: VeriSign Managed PKI, VeriSign Secure Messaging for Microsoft Exchange, and VeriSign Go Secure!
|
> VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=479
|
|
