Detections
Analytics
activePDF Server < 3.8.6 Packet Handling Remote Overflow
critical Nessus Plugin ID 31349
Language:
Synopsis
The remote Windows host contains a program that is affected by a buffer overflow vulnerability.Description
activePDF Server is installed on the remote host. It is used to provide PDF generation and conversion from within enterprise and web applications.The version of activePDF Server installed on the remote host contains a heap-based buffer overflow that can be triggered by sending a packet specifying a size smaller than the actual size of the following data.
An unauthenticated, remote attacker may be able to leverage this issue to crash the affected service or execute arbitrary code.
Note that the service runs with SYSTEM privileges, so successful exploitation could lead to a complete compromise of the affected host.
Solution
Upgrade to activePDF version 3.8.6 or later.See Also
https://secuniaresearch.flexerasoftware.com/secunia_research/2007-87/advisory
http://www.activepdf.com/support/knowledgebase/viewKb.cfm?fs=1&ID=11744
Plugin Details
Severity: Critical
ID: 31349
File Name: activepdf_3_8_6.nasl
Version: 1.17
Type: remote
Agent: windows
Family: Windows
Published: 3/5/2008
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2007-5397
BID: 28013