Arbitrary Remote Code Execution Vulnerability in WildTangent Web Driver 4.0

Reported June 03, 2004, byNGSSoftware
 

VERSIONS AFFECTED

DESCRIPTION
A vulnerability in WildTangent Web Driver 4.0 could result in arbitrary remotecode execution on the vulnerable system. You could cause a number of bufferoverruns within the WildTangent package, namely within the WTHoster andWebDriver modules, by using any method that takes a filename as a parameter.You can obtain more information about this vulnerability on the discoverer's Web site.

VENDOR RESPONSE
WildTangent hasreleased version4.1, which isn't vulnerable to this condition.

CREDIT
Discovered by NGSSoftware.