漏洞描述
Multiple stack-based buffer overflows in the HyleosChemView.HLChemView ActiveX control (HyleosChemView.ocx) in Hyleos ChemView 1.9.5.1 allow remote attackers to execute arbitrary code via a large number of white space characters in the filename argument to the (1) SaveasMolFile and (2) ReadMolFile methods.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/38225↗osvdb.orghttp://osvdb.org/62276↗secunia.comhttp://secunia.com/advisories/38523↗packetstormsecurity.orghttp://packetstormsecurity.org/1002-advisories/chemviewx-overflow.txt↗www.security-assessment.comhttp://www.security-assessment.com/files/advisories/2010-02-11_ChemviewX_Activex.pdf↗