Text :  

---------------------------------------------------------------------------
--------

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability


Summary: Deimos Kasa is a Windows restaurant management software.

Desc: Deimos Kasa is prone to an integer overflow vulnerability because
it fails to perform adequate boundary checks on user-supplied input
in the table field. Successfully exploiting these issues may allow
local attackers to execute arbitrary code in the context of the
application. Failed exploit attempts will cause denial-of-service
conditions.

Product web page: http://www.planet.com.mk

Vendor: Planet Interactive DOO

Version Affected: 2.22.0.0, 2.49.0.0, 2.55.0.0 and 2.58.0.0

Tested on Microsoft Windows XP Professional SP2 (English)

Vulnerability discovered by Gjoko 'LiquidWorm' Krstic

liquidworm gmail com

Zero Science Lab - http://www.zeroscience.mk

12.12.2009

Advisory: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4929.php

---------------------------------------------------------------------------
--------


PoC:

The issue can be triggered by entering 10+ integers in the Table field (no
pass needed).

Masa field: 1111111111 [ENTER]

//EOF

  References :  

None