Secunia

Some vulnerabilities have been discovered in RadAsm, which can be exploited by malicious people to compromise a user's system.

1) A boundary error in the processing of RadAsm project files (".rap") can be exploited to cause a buffer overflow via a specially crafted ".rap" file containing an overly long "Group" entry.

2) The application trusts program paths defined in a RadAsm project file. This can be exploited to execute arbitrary commands by tricking a user into e.g. assembling a RadAsm project having a specially crafted "MakeDef" section.

3) A boundary error in the processing of RadAsm project files (".rap") can be exploited to cause a stack-based buffer overflow via a specially crafted ".rap" file containing an overly long value in the "Files" section.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

The vulnerabilities are confirmed in version 2.2.1.5. Other versions may also be affected.

Solution
Do not open untrusted ".rap" files using RadAsm.

Provided and/or discovered by
1, 2) Data_Sniper
3) Marius Sylvester

Changelog
Further details available in Customer Area

Original Advisory
1) http://milw0rm.com/exploits/7334

Deep Links
Links available in Customer Area