EUVD-2010-0792

Malware in sbrugna...

Integer overflow

Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an invalid length...

CVE-2010-0766

Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an invalid length...

CVE-2010-0766

Luxology Modo 401 is affected by CVE-2010-0766 due to an integer overflow in the Swap4 function of valet4.dll when parsing CHNL subchunks in .LXO files. An invalid length can cause the function to reverse the stack, potentially enabling code execution on a system running Luxology Modo 401 (Window...