Trojan-Proxy.Win32.Symbab.o Service Port 8080 redirecturl heap-based overflow

Summaryinfo

A vulnerability was found in Trojan-Proxy.Win32.Symbab.o. It has been rated as critical. This vulnerability affects unknown code of the component Service Port 8080. Performing a manipulation of the argument redirecturl results in heap-based overflow. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability, which was classified as critical, was found in Trojan-Proxy.Win32.Symbab.o (Firewall Software) (version unknown). This affects an unknown function of the component Service Port 8080. The manipulation of the argument redirecturl with an unknown input leads to a heap-based overflow vulnerability. CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). This is going to have an impact on confidentiality, integrity, and availability.

The weakness was shared 06/07/2022 by John Page as MVID-2022-0610. The advisory is shared at malvuln.com. Technical details and a public exploit are known.

The exploit is shared for download at malvuln.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Firewall Software

Name

• Trojan-Proxy.Win32.Symbab.o

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #38460: Trojan-Proxy.Win32.Symbab.o / Heap Corruption (by malvuln)

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion