RULE(RULE ID:332265)

Rule General Information
Release Date: 2021-01-21
Rule Name: Poster Software PUBLISH-iT PUI File Processing Buffer Overflow Vulnerability (CVE-2014-0980)
Severity:
CVE ID:
Rule Protection Details
Description: A stack buffer overflow vulnerability exists in Poster Software PUBLISH-iT. The vulnerability is due to insufficient validation on the length of entry names in a "styl" record when processing PUI files. A remote unauthenticated attacker can exploit this vulnerability by enticing a user to open a malicious PUI file. Successful exploitation could result in arbitrary code execution in the context of the currently logged in user.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, Others
Reference: ExploitDB:31461
SecurityFocusBID:65366
http://packetstormsecurity.com/files/125089
http://seclists.org/fulldisclosure/2014/Feb/34
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
http://www.postersw.com/