Customer Area
Need help?
Try CSI
Scan Now
Secunia Advisory SA26960Ask Toolbar ToolbarSettings ActiveX Control Buffer Overflow
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
Joey Mengele has discovered a vulnerability in Ask Toolbar, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control (askBar.dll) when handling the "ShortFormat" property. This can be exploited to cause a stack-based buffer overflow by assigning an overly long (greater than 500 bytes) string to the affected property. Successful exploitation allows execution of arbitrary code. The vulnerability is confirmed in version 4.0.2. Other versions may also be affected. Solution Provided and/or discovered by Alternate/detailed remediation Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Latest advisories
New advisories: 16
New vulnerabilities: 43
Updated advisories: 21
See all
New vulnerabilities: 43
Updated advisories: 21
101 views
115 views
