UltraFXP v1.07 Create Server-Container UltraFxp.exe memory corruption

Summaryinfo

A vulnerability was found in UltraFXP v1.07. It has been classified as problematic. Impacted is an unknown function of the file UltraFxp.exe of the component Create Server-Container. This manipulation causes memory corruption. Moreover, an exploit is present.

Detailsinfo

A vulnerability has been found in UltraFXP v1.07 and classified as problematic. Affected by this vulnerability is an unknown code block of the file UltraFxp.exe of the component Create Server-Container. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was disclosed 08/14/2011 by Pim Campers as VL-ID 161 as not defined advisory (Website). It is possible to read the advisory at vulnerability-lab.com. The exploitation appears to be easy. Attacking locally is a requirement. The requirement for exploitation is a single authentication. Technical details and also a public exploit are known.

A public exploit has been developed by Pim Campers and been published immediately after the advisory. It is possible to download the exploit at vulnerability-lab.com. It is declared as proof-of-concept. The code used by the exploit is:

Run (@ProgramFilesDir&"\UltraFXP\UltraFxp.exe")
Sleep(5000)
WinActivate("UltraFXP ")
SEND("{CTRLDOWN}")
while(1)
 SEND("{n}")
WEnd

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entry VDB-91328 is pretty similar. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• UltraFXP

Version

• v1.07

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion