ExpressView.Browser.Plugin.Integer.Overflow

Description

This indicates an attack attempt against an Integer Overflow vulnerability in ExpressView Browser Plug-in.
The vulnerability is caused by an error when handling malformed "SID" file. It allows a remote attacker to execute arbitrary code by sending a crafted "SID" file.

Affected Products

ExpressView Browser Plug-in 6.5.0.3330 and prior versions

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

References