Secunia

Some vulnerabilities have been discovered in Alleycode HTML Editor, which can be exploited by malicious people to compromise a user's system.

1) A boundary error exists in the Meta Content Optimizer when displaying the content of "TITLE" HTML tags. This can be exploited to cause a stack-based buffer overflow via an HTML file defining an overly long "TITLE".

2) Two boundary errors exist in the Meta Content Optimizer when displaying the content of "META" HTML tags. These can be exploited to cause stack-based buffer overflows via HTML files defining overly long "description" or "keywords" "META" elements.

Successful exploitation of the vulnerabilities allows execution of arbitrary code, but requires that a user is tricked into running the Meta Content Optimizer on a malicious HTML file.

The vulnerabilities are confirmed in version 2.21. Other versions may also be affected.

Solution
Do not process untrusted HTML files.

Provided and/or discovered by
1) Rafael Sousa
2) an anonymous person

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area