Vizzy has reported a vulnerability in eSignal, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within "Specs.dll" when parsing incoming data requests. This can be exploited to cause a buffer overflow by sending a request, which includes an overly long string (about 1040 bytes) in a <STREAMQUOTE> tag.

The vulnerability has been reported in versions 7.5 and 7.6. Other versions may also be affected.

NOTE: An exploit has been published.

Solution
The vulnerability has reportedly been fixed in version 7.6 release 3 (Build 636a):
Further details available in Customer Area

Provided and/or discovered by
Vizzy

Changelog
Further details available in Customer Area

Original Advisory
http://viziblesoft.com/insect/advisories/vz012004-esignal7.txt

Deep Links
Links available in Customer Area