Published: 22/02/2010 Updated: 23/02/2010

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote malicious users to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hyleos chemview 1.9.5.1

## # $Id: hyleos_chemviewx_activexrb 9935 2010-07-27 02:25:15Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core ...

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = AverageRanking incl ...

CWE-119 http://packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt http://www.securityfocus.com/bid/38225 http://osvdb.org/62276 http://secunia.com/advisories/38523 http://www.security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf http://www.exploit-db.com/exploits/11422 http://packetstormsecurity.org/1002-exploits/hyleoschemview-heap.rb.txt https://nvd.nist.gov https://www.exploit-db.com/exploits/16500/

CVE-2010-0679

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect