Multiple vulnerabilities have been reported in EMC AutoStart, which can be exploited by malicious people to compromise a vulnerable system.

1) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 50 and subcode 42 can be exploited to cause a heap-based buffer overflow.

2) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 50 and subcode 60 can be exploited to cause a heap-based buffer overflow.

3) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 65 and subcode 18 can be exploited to cause a heap-based buffer overflow.

4) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 85 and subcode 01 can be exploited to cause a heap-based buffer overflow.

5) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 85 and subcode 22 can be exploited to cause a heap-based buffer overflow.

6) Use of an uninitialised variable combined with a signedness error in ftAgent.exe when calculating a pointer to memory during parsing of packets with opcode 65 and subcode 00 can be exploited to corrupt memory.

7) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 03 and subcode 04 can be exploited to cause a heap-based buffer overflow.

8) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 50 and subcode 02 can be exploited to cause a heap-based buffer overflow.

9) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 50 and subcode 04 can be exploited to cause a heap-based buffer overflow.

10) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 75 and subcode 7500 can be exploited to cause a heap-based buffer overflow.

11) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 0x14 subcode 0x7e7 can be exploited to cause a heap-based buffer overflow.

12) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 0x14 and subcode 0x1194 can be exploited to cause a heap-based buffer overflow.

13) An integer overflow error in ftAgent.exe when allocating a buffer based on a value in a packet with opcode 0x2d and subcode 0x1194 can be exploited to cause a heap-based buffer overflow.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code with SYSTEM privileges via specially crafted packets sent to TCP port 8045.

The vulnerabilities are reported in versions prior to 5.4.3.

Solution
Update to version 5.4.3.

Provided and/or discovered by
gwslabs.com via ZDI

Changelog
Further details available to Secunia VIM customers

Original Advisory
EMC:
http://archives.neohapsis.com/archives/bugtraq/2012-05/att-0120/ESA-2012-020.txt

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-116/
http://www.zerodayinitiative.com/advisories/ZDI-12-117/
http://www.zerodayinitiative.com/advisories/ZDI-12-118/
http://www.zerodayinitiative.com/advisories/ZDI-12-119/
http://www.zerodayinitiative.com/advisories/ZDI-12-120/
http://www.zerodayinitiative.com/advisories/ZDI-12-121/
http://www.zerodayinitiative.com/advisories/ZDI-12-122/
http://www.zerodayinitiative.com/advisories/ZDI-12-123/
http://www.zerodayinitiative.com/advisories/ZDI-12-124/
http://www.zerodayinitiative.com/advisories/ZDI-12-144/
http://www.zerodayinitiative.com/advisories/ZDI-12-159/
http://www.zerodayinitiative.com/advisories/ZDI-12-160/
http://www.zerodayinitiative.com/advisories/ZDI-12-161/

Deep Links
Links available to Secunia VIM customers