Security

  Text :  


Title: EDraw Flowchart ActiveX Control 2.3 (EDImage.ocx) Remote DoS Exploit
(IE)
Advisory ID: ZSL-2010-4936
Type: Local/Remote
Impact: DoS
Risk: (2/5)
Release Date: 22.04.2010

Summary
Do you want to learn how to draw? Now you can online! Learn how to draw
like a local application with Edraw Flowchart ActiveX Control that lets you
quickly build basic flowcharts, organizational charts, business charts, hr
diagram, work flow, programming flowchart and network diagrams.

Description
EDraw Flowchart ActiveX Control EDImage.OCX suffers from a denial of
service vulnerability when parsing large amount of bytes to the
OpenDocument() function, resulting in browser crash and unspecified memory
corruption.

---------------------------------------------------------------------------
-----

Report for Clsid: {F685AFD8-A5CC-410E-98E4-BAA1C559BA61}
RegKey Safe for Script: True
RegKey Safe for Init: True
Implements IObjectSafety: False

---------------------------------------------------------------------------
-----

Vendor
EdrawSoft - http://www.edrawsoft.com

Affected Version
2.3.0.6

Tested On
Microsoft Windows XP Professional Service Pack 3 (English)
Microsoft Internet Explorer 8.0.6001.18702

Vendor Status
N/A
PoC
edraw_ocx.vbs

Credits
Vulnerability discovered by Gjoko Krstic - <gjoko@zeroscience.mk>
References