Secunia

Multiple vulnerabilities have been reported in eMule and some clones, where the most serious can be exploited by malicious people to compromise a user's system.

1) A format string error in the handling of "OP_SERVERMESSAGE" messages from servers can be exploited by a malicious server to execute arbitrary code on a vulnerable client system.

2) A boundary error in the handling of "OP_SERVERIDENT" messages can be exploited to cause a heap overflow. This can possible by a malicious server to to execute arbitrary code on a client system by sending specially crafted serverident packet.

3) A format string error in the handling of server names can be exploited to crash a vulnerable client. Execution of arbitrary code is not thought possible due to length restrictions on the server names.

4) An error in the handling of certain packet sequences can be exploited to execute arbitrary code on a vulnerable client.

The vulnerabilities have been reported to affect the following versions:

- eMule version 0.29c and prior
- xmule version 1.5.6a and prior
- lmule version 1.3.1 and prior

Solution
Update to eMule 0.30a:
Further details available in Customer Area

Provided and/or discovered by
Stefan Esser

Changelog
Further details available in Customer Area

Original Advisory
http://security.e-matters.de/advisories/022003.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area