JVN#49476817: DX Library vulnerable to buffer overflow

DX Library is an open source library for creating Windows application. DX Library contains a buffer overflow vulnerability due to a flaw in processing an inner function CL_vsprintf().

Impact

When processing a specially crafted string, an application built using DX Library may allow an arbitrary code to be executed with the privilege of the user running the application.

Solution

Update DX Library and rebuild the application
Update to the latest version of DX Library and rebuild the application.

Products Affected

• DX Library for VisualC++ Ver3.15e and earlier
• DX Library for BorlandC++ Ver3.15e and earlier
• DX Library for Gnu C++ Ver3.15e and earlier
• DX Library for VisualC# Ver3.15e and earlier