Secunia

NGSSoftware has reported two vulnerabilities in AtHoc Toolbar, which can be exploited by malicious people to compromise a user's system.

1) A boundary error within the handling of skin names can be exploited to cause a stack-based buffer overflow by passing an overly long skin name to the "SetSkin()" method exported by the ActiveX control.

2) A format string error in the "SetBaseURL()" function within the logging functionality can be exploited by passing a specially crafted string containing format specifiers as URL to the function.

Successful exploitation allows execution of arbitrary code on the user's system when e.g. a malicious web site is visited.

Solution
The vulnerability has reportedly been fixed in the latest version.

Provided and/or discovered by
Mark Litchfield and John Heasman, NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
NGSSoftware:
http://www.ngssoftware.com/advisories/athoc-01full.txt

Deep Links
Links available in Customer Area