Signature Detail

HTTP: LEADTOOLS Multimedia 'LTMM15.DLL' Arbitrary File Overwrite

This signature detects attempts to exploit a known flaw in LEADTOOLS Multimedia, which is prone to multiple vulnerabilities that allow attackers to overwrite arbitrary files. These issues occur when the 'SaveSettingsToFile()' and 'UnlockSupport' method of the 'LTMM15.DLL' dynamic-link library handles user-supplied data. A sucessful attack could result in arbitrary code execution.

Extended Description

LEADTOOLS Multimedia is prone to multiple vulnerabilities that allow attackers to overwrite arbitrary files. These issues affect multiple ActiveX controls. An attacker can exploit these issues by enticing an unsuspecting victim to view a malicious HTML page. Successfully exploiting these issues will allow the attacker to corrupt and overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer). LEADTOOLS Multimedia 15 is vulnerable; other versions may also be affected.

Affected Products

• LeadTools Multimedia 15

References

• BugTraq: 28442