Secunia

Manigandan Radhakrishnan has reported two vulnerabilities in GREED, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the "DownloadLoop()" function when parsing GRX files can be exploited to cause a buffer overflow.

2) An input validation error in the "DownloadLoop()" function can be exploited to pass arbitrary commands to a "system()" call via a specially crafted filename containing shell meta-characters.

Successful exploitation of the two vulnerabilities allows execution of arbitrary code, but requires that a user is tricked into opening a specially crafted GRX file list.

The vulnerability has been reported in version 0.81p. Other versions may also be affected.

Solution
The product has reportedly been discontinued.
Further details available in Customer Area

Provided and/or discovered by
Manigandan Radhakrishnan

Changelog
Further details available in Customer Area

Original Advisory
http://tigger.uic.edu/~jlongs2/holes/greed.txt

Deep Links
Links available in Customer Area