Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: Flaw in MFC42 and MFC71 findfile() function SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Flaw in MFC42 and MFC71 findfile() function

A few readers brought it to our attention that a new 0-day vulnerability related to Windows platform has been published. The vulnerability is in the native libraries of Windows MFC42 and MFC71. The function CFileFind::FindFile() in MFC library is lacking in validation, when function argument is an overly long string, a heap overflow condition can result.

The effect of this vulnerability would be dependent on the application calling the function, some applications are easier to exploit than others. It is unknown at this point what major applications are affected by this vulnerability.

Please refer to this article for more details

I will be teaching next: Leading Cloud Security Design and Implementation - SANS Amsterdam October 2021

Jason

93 Posts
ISC Handler
Sep 18th 2007

Sign Up for Free or Log In to start participating in the conversation!