Microsoft Windows ART image rendering library buffer overflow
| win-art-image-bo (26809) |  High Risk |
Description:
The Microsoft Windows ART image rending library is vulnerable to a buffer overflow, caused by improper bounds checking of AOL ART images. By creating a specially-crafted AOL ART image, a remote attacker could overflow a buffer and execute arbitrary code on the system with privileges of the victim, once the malicious image is viewed in Internet Explorer. The attacker could exploit this vulnerability by sending the malicious image to a victim as an email attachment or hosting it on a Web site, and then persuading a potential victim to visit the site.
Consequences:
Gain Access
Remedy:
Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS06-022. See References.
References:
- iDefense Advisory: 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability.
- Microsoft Security Bulletin MS06-022: Vulnerability in ART Image Rendering Could Allow Remote Code Execution (918439).
- ASA-2006-126: Windows Security Updates for June 2006 - (MS06-021 - MS06-032)
- BID-18394: Microsoft Windows Malformed ART Image Remote Code Execution Vulnerability
- CVE-2006-2378: Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
- OSVDB ID: 26432: Microsoft Windows jgdw400.dll ART Image Rendering Overflow
- SA20605: Microsoft Windows ART Image Handling Buffer Overflow
- SECTRACK ID: 1016292: Microsoft Windows Buffer Overflow in AOL ART Image Rendering Library Lets Remote Users Execute Arbitrary Code
- US-CERT VU#923236: Microsoft Windows ART image handling buffer overflow
- VUPEN/ADV-2006-2320: Microsoft Windows ART Image Rendering Code Execution Vulnerability (MS06-022)
Platforms Affected:
- Microsoft Internet Explorer 5.01 SP4
- Microsoft Internet Explorer 6.0 SP1
- Microsoft Windows 2000 SP4
- Microsoft Windows 2003 Server SP1
- Microsoft Windows 2003 Server Itanium
- Microsoft Windows 2003 Server SP1 Itanium
- Microsoft Windows 2003 Server x64
- Microsoft Windows XP SP2
- Microsoft Windows XP SP1
- Microsoft Windows XP x64 Professional
Reported:
Jun 13, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net