vendor:
LogMeIn Remote Access Utility
by:
Yag Kohha
7.5
CVSS
HIGH
Memory Corruption
119
CWE
Product Name: LogMeIn Remote Access Utility
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: a:logmein:logmein_remote_access_utility
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC (DoS)
A vulnerability exists in LogMeIn Remote Access Utility ActiveX component (RACtrl.dll) which can be exploited to cause a denial of service. The vulnerability is caused due to a boundary error when handling the 'fgcolor', 'bgcolor' and 'fmcolor' properties. This can be exploited to corrupt memory by supplying a specially crafted value to the affected properties. Successful exploitation may allow execution of arbitrary code, but this has not been confirmed.
Mitigation:
No known mitigation or remediation for this vulnerability.
