Summary
This host is installed with eSignal and is prone to multiple vulnerabilities.
Impact
Successful exploitation allows execution of arbitrary code.
Impact Level: System/Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore.
General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one.
Insight
- A boundary error in WinSig.exe when processing QUOTE files can be exploited to cause a stack-based buffer overflow.
- A boundary error in WinSig.exe when processing the '<FaceName>' tag can be exploited to cause a heap-based buffer overflow via a specially crafted Time and Sales file.
- The application loads libraries in an insecure manner and can be exploited to load arbitrary libraries by tricking a user into opening a QUOTE file located on a remote WebDAV or SMB share.
Affected
eSignal version 10.6.2425.1208 and prior.
References
Severity
Classification
-
CVE CVE-2011-3494, CVE-2011-3503 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Air Remote Code Execution Vulnerability -June13 (Mac OS X)
- Adobe Acrobat Out-of-bounds Vulnerability Feb15 (Windows)
- Adobe Acrobat and Reader Multiple Vulnerabilities -July10 (Windows)
- Adobe Air Multiple Vulnerabilities - November12 (Windows)
- Adobe Acrobat Multiple Vulnerabilities-01 Sep14 (Mac OS X)