Signature Detail

HTTP: Chasys Draw IES Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Chasys Draw application. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.

Affected Products

• Jpchacha chasys_draw_ies 4.00.01
• Jpchacha chasys_draw_ies 4.01.01
• Jpchacha chasys_draw_ies 4.02.01
• Jpchacha chasys_draw_ies 4.03.02
• Jpchacha chasys_draw_ies 4.04.01
• Jpchacha chasys_draw_ies 4.06.02
• Jpchacha chasys_draw_ies 4.10.01

References

• BugTraq: 61463
• CVE: CVE-2013-3928
• URL: http://secunia.com/advisories/53773/
• URL: http://longinox.blogspot.com/2013/08/explot-stack-based-overflow-bypassing.html