Symantec MIME Message Modification Heap Overflow
Posted by deepcore on June 30, 2016 – 12:56 am
Symantec attempts to clean or remove components from archives or other multipart containers that they detect as malicious. The code that they use to remove components from MIME encoded messages in CMIMEParser::UpdateHeader() assumes that filenames cannot be longer than 77 characters. This assumption is obviously incorrect, names can be any length, resulting in a very clean heap overflow.
Post a reply
You must be logged in to post a comment.