tuergeist has discovered a vulnerability in Mico, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the "CORBA::ORBInvokeRec::set_answer_invoke()" method in orb.cc. This can be exploited to crash an application using the vulnerable library by sending an incorrect object key.

The vulnerability has been confirmed in version 2.3.12 and has also been reported in version 2.3.12 RC3. Other versions may also be affected.

Solution
Fixed in version 2.3.13.

Provided and/or discovered by
tuergeist

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047708.html
http://www.mico.org/CHANGES

Deep Links
Links available to Secunia VIM customers