Netwrix Auditor 7.1.322.0 ActiveX (sourceFile) Stack Buffer Overflow
Posted by deepcore on March 17, 2016 – 6:17 am
Netwrix Auditor version 7.1.322.0 suffers from a stack-based buffer overflow vulnerability when parsing large amount of bytes to the ‘sourceFile’ string parameter in PackFile() and UnpackFile() functions in ‘Netwrix.Common.CollectEngine.dll’ library, resulting in stack overrun overwriting several registers including the SEH chain. An attacker can gain access to the system of the affected node and execute arbitrary code.
Post a reply
You must be logged in to post a comment.