Bitsmith Software Personal Knowbase knowbase.exe FileOpen Dialogue Local Overflow

low Nessus Plugin ID 58649

Synopsis

An application installed on the remote Windows host is affected by a buffer overflow vulnerability.

Description

The version of Bitsmith Personal Knowledge base installed on the remote Windows host is prior to 3.2.4. It is, therefore, affected by a local buffer overflow vulnerability that can be triggered by specifying an oversized string for a specific registry value. This vulnerability may allow for arbitrary code to be executed subject to the user's privileges.

Solution

Upgrade to Bitsmith Personal Knowbase 3.2.4 or later.

See Also

https://www.vulnerability-lab.com/get_content.php?id=474

https://www.bitsmithsoft.com/pkhist.htm#vers324

Plugin Details

Severity: Low

ID: 58649

File Name: bitsmith_knowbase_buffer_overflow.nasl

Version: 1.10

Type: local

Agent: windows

Family: Windows

Published: 4/10/2012

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

CVSS v2

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.3

Vector: CVSS2#AV:L/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: x-cpe:/a:bitsmith:personal_knowbase

Required KB Items: SMB/Bitsmith_Knowbase/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/28/2012

Vulnerability Publication Date: 3/28/2012

Reference Information

BID: 52826