Signature Detail
Short Name |
HTTP:STC:DL:PCSOFT-WDP-FILE-OF |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
PC SOFT WinDEV WDP File Parsing Stack Buffer Overflow |
Release Date |
2012/11/02 |
Update Number |
2200 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: PC SOFT WinDEV WDP File Parsing Stack Buffer Overflow
This signature detects attempts to exploit a known vulnerability against PC SOFT WinDEV. A successful attack can lead to a stack-based overflow and arbitrary remote code execution within the context of the affected application.
Extended Description
PC SOFT WinDEV is prone to a stack-based buffer-overflow vulnerability when it attempts to process malformed project files. This issue occurs because the application fails to perform proper bounds-checking on user-supplied data before copying it to an insufficiently sized memory buffer. An attacker may exploit this issue to execute arbitrary code with the privileges of the user running the vulnerable application or to cause denial-of-service conditions. This may facilitate unauthorized access or privilege escalation. PC SOFT WinDEV 11 is reported vulnerable; other versions and related products (WinDEV Express, Mobile, and WebDEV) may also be affected.
Affected Products
- PC SOFT Windev 11
References
- BugTraq: 24693
- CVE: CVE-2007-3479
- CVE: CVE-2007-3480