Title: Microsoft Windows itss.dll CHM Processing Overflow
Info
Disclosure
May 09, 2006
Discovery
Unknown
Dates
Exploit
May 09, 2006
Solution
Unknown
Description
Microsoft Windows contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered due to a boundary error in the Infotech Storage System Library (itss.dll) when reading a ".CHM" file. It is possible that the flaw may cause a heap corruption and may allow arbitrary code execution resulting in a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
OSVDB Verified
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.