Secunia Logo
Netsikker nu! 2008
 
Microsoft Browser Client Context Tool Three Vulnerabilities
Secunia Advisory: SA13365
Release Date: 2004-12-07
Popularity: 20,851 views

Critical:
Highly critical
Impact: Cross Site Scripting
System access
Where: From remote
Solution Status: Unpatched

Software:Microsoft Browser Client Context Tool (W3Who.dll)

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2004-1133
CVE-2004-1134


Description:
Nicolas Gregoire has reported some vulnerabilities in Microsoft Browser Client Context Tool (W3Who.dll), which can be exploited by malicious people to conduct cross-site scripting attacks or potentially compromise a vulnerable system.

1) Invalid input passed to the ISAPI extension is not properly sanitised before being returned to users in error messages. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable web site.

Example:
http://[host]/scripts/w3who.dll?bogus=[code]

2) Input passed in HTTP headers is not properly sanitised before being displayed. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of a vulnerable web site.

3) A boundary error within the processing of parameters can be exploited to cause a buffer overflow by passing an overly long parameter.

Example:
http://[host]/scripts/w3who.dll?AAAAAAAAA...[519 to 12571]....AAAAAAAAAAAAA

Solution:
Remove the W3Who.dll ISAPI extension.

Provided and/or discovered by:
Nicolas Gregoire, Exaprobe.

Original Advisory:
http://www.exaprobe.com/labs/advisories/esa-2004-1206.html


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 19
New vulnerabilities: 68
Updated advisories: 62

Moderately // 199 views
Debian update for php5
Moderately // 145 views
Atarone CMS Multiple Vulnerabilities
Moderately // 183 views
Debian update for squid
Less // 195 views
SUSE update for mercurial
Moderately // 241 views
SUSE update for openssh
Less // 186 views
Fedora update for mediawiki

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Debian update for php5 // 57 views
2. SUSE update for openssh // 48 views
3. WMNews Cross-Site Scripting Vulnerabilities // 46 views
4. H-Sphere webshell4 Cross-Site Scripting and Request Forgery // 45 views
5. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 41 views
6. SUSE update for mercurial // 32 views
7. Fedora update for mediawiki // 31 views
8. HP-UX NFS/ONCplus Denial of Service Vulnerability // 30 views
9. CMME Information Disclosure Security Issues // 30 views
10. Atarone CMS Multiple Vulnerabilities // 30 views