Secunia

Some vulnerabilities have been discovered in IntelliTamper, which can be exploited by malicious people to compromise a user's system.

1) A boundary error when reading map files (".map") can be exploited to cause a stack-based buffer overflow via a map file containing an overly long line (greater than 4096 bytes).

2) A boundary error when reading map files can be exploited to cause a stack-based buffer overflow via a map file containing an overly long "FOLDER##" line (greater than 480 bytes).

3) Boundary errors when scanning web pages can be exploited to cause stack-based buffer overflows via a web page containing certain HTML tags with an overly long attribute or value (greater than 512 bytes).

4) A boundary error when processing HTTP responses of a scanned site can be exploited to cause a stack-based buffer overflow via a specially crafted HTTP response with an overly long "Server", "Date", "Content-Type", "Set-Cookie", "Content-Length", "Last-Modified", or "Location" header (greater than 512 bytes).

5) A boundary error when processing responses of a scanned site can be exploited to cause a heap-based buffer overflow via a specially crafted, overly long response (greater than 4096 bytes).

6) A boundary error when reading map files can be exploited to cause a stack-based buffer overflow via a map file containing an overly long "FILE##" line.

7) A boundary error when reading language catalog files can be exploited to cause a stack-based buffer overflow via an overly long catalog entry.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are confirmed in version 2.07. Other versions may also be affected.

Solution
Do not open site map files (".map") originating from untrusted sources.
Further details available in Customer Area

Provided and/or discovered by
1) Devil00
2, 3) Guido Landi
4) Koshi
6) cN4phux
7) Cnaph

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/6103
http://milw0rm.com/exploits/6106
http://milw0rm.com/exploits/6118
http://milw0rm.com/exploits/7582
http://milw0rm.com/exploits/7707

Deep Links
Links available in Customer Area