Security Advisory SA40161 - GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities

Secunia

Blog

Secunia Advisory SA40161

GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities

Secunia Advisory

SA40161

Release Date

2010-07-15

Popularity

3,268 views

Comments

4 comments

Criticality level

Highly critical

Impact

System access

Where

From remote

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Unpatched

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Remediation status

Secunia VIM

Software:

GIGABYTE Dldrv2 ActiveX Control 1.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

CVE-2010-1517 CVSS score available to Secunia VIM customers
CVE-2010-1518 CVSS score available to Secunia VIM customers

Description

Secunia Research has discovered some vulnerabilities in GIGABYTE Dldrv2 ActiveX Control, which can be exploited by malicious people to compromise a user's system.

1) The unsafe method "dl()" allows automatically downloading and executing an arbitrary file.

2) Combined usage of the unsafe methods "SetDLInfo()" and "Bdl()" allows automatically downloading an arbitrary file to an arbitrary location on the user's system.

3) Missing input validation of the "item" argument passed to the "SetDLInfo()" method can be exploited via array-indexing errors to overwrite memory and execute arbirtary code.

The vulnerabilities are confirmed in version 1.4.206.11. Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
Carsten Eiram, Secunia Research.

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2010-85/
http://secunia.com/secunia_research/2010-86/

Technical Analysis
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities

User

Message

hegefer

RE: GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities

17th Jan, 2011 20:32

Score: -3
Posts: 2
User Since: 30th Apr 2009
System Score: N/A
Location: HU
Last edited on 17th Jan, 2011 20:32

It is stated above:"Solution
Set the kill-bit for the affected ActiveX control."
My question is: How can I do that? I'm a simple user, not an expert.
Thx (if I get an answer)

Was this reply relevant?

-4

ddmarshall

RE: GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities

17th Jan, 2011 21:04

Score: 1126
Posts: 910
User Since: 8th Nov 2008
System Score: 100%
Location: UK

Killbits are usually set through a Microsoft Update at the request of the vendor.

In the unlikely event that you want to try it yourself, the information is here:
http://support.microsoft.com/kb/240797

An in depth explanation:
http://blogs.technet.com/b/srd/archive/2008/02/06/...
http://blogs.technet.com/b/srd/archive/2008/02/07/...
http://blogs.technet.com/b/srd/archive/2008/02/08/...

This is the downloader that GigaByte use to download BIOS updates. As you don't need it most of the time, rather than messing with killbits I would either:
1. Uninstall it if it appears in Add/Remove Programs
2. Use Manage Addons in Internet Explorer Tools to disable iit

--
This answer is provided “as-is.” You bear the risk of using it.

Was this reply relevant?

-0

hegefer	RE: GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities	[+]
This reply has been minimised due to a negative Relevancy Score.

mogs	RE: GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities	[+]
This reply has been minimised due to a negative Relevancy Score.

Secunia Advisory SA40161

GIGABYTE Dldrv2 ActiveX Control Multiple Vulnerabilities

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?