--------------------------------------------------------------------------------
| BufferOverflow Vulnerability on Logica HotScan SWIFT Alliance Access Interface
--------------------------------------------------------------------------------
Summary
=======
Hotscan Listener interface is prone to buffer-overflow vulnerability
because the application fails to perform adequate boundary checks on
user-supplied input. This allows remote attackers to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted font
file
CVE number: CVE-2012-2624
Impact: Critical
Vendor notified: May 11, 2012
Vendor response: Vendor patched the vulnerability ( June 16, 2012 )
.
Affected Products
======== ========
Logica HotScan Interface
Details
=======
By sending malicious input to hotscan listener tcp interface, it is
possible to overwrite stack only by two bytes. The software compiled
with NXCOMPAT,Code execution could not be done. Therefore crash of
this service can stop all swift process , this effects the impact of
vulnerability.
(Register output:
ECX 76E801B8 ASCII "STATUS_STACK_BUFFER_OVERRUN encountered"
EDX 0018F325 ASCII 0A,"STATUS_STA"
EBX 0042AEAC HOTS_Rec.0042AEAC
ESP 0018F56C
EBP 0018F5E8
ESI 00000000
EDI 00000000
EIP 76E7FF9A kernel32.76E7FF9A
Solution
========
Vendor released a patch to fix the bug.
