HTTP: Chasys Draw IES Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Chasys Draw application. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.

Affected Products

Jpchacha chasys_draw_ies

References

BugTraq: 61463

CVE: CVE-2013-3928

URL: http://secunia.com/advisories/53773/ http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html

Short Name

HTTP:MISC:CHASYS-BO

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Chasys Draw IES Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?