Security Advisory SA48430 - CYME ChartFX Client Server ActiveX Control Array Indexing Vulnerability

Secunia

Blog

Secunia Advisory SA48430

CYME ChartFX Client Server ActiveX Control Array Indexing Vulnerability

Secunia Advisory

SA48430

Release Date

2012-10-03

Last Update

2012-10-04

Popularity

1,389 view

Comments

0 comments

Criticality level

Highly critical

Impact

System access

Where

From remote

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Unpatched

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Remediation status

Secunia VIM

Software:

ChartFX Client Server ActiveX Control 6.x

CYME 5.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

No CVE references.

Description

Francis Provencher has discovered a vulnerability in CYME, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an indexing error in the "ShowPropertiesDialog()" method (ChartFX.ClientServer.Core.dll) of the ChartFX ActiveX Control. This can be exploited to write a single byte value to an arbitrary memory location via the "pageNumber" parameter.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in the following products (other versions may also be affected):
* CYME version 5.0.12.663.
* ChartFX Client Server ActiveX Control version 6.2.2421.25134.

Solution
No official solution is currently available.

Provided and/or discovered by
Francis Provencher via Secunia.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=62&Itemid=62

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: CYME ChartFX Client Server ActiveX Control Array Indexing Vulnerability

No posts yet

Secunia Advisory SA48430

CYME ChartFX Client Server ActiveX Control Array Indexing Vulnerability

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?