CVE-2010-0766 Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an....
HighCVSS 9.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an invalid length.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| luxology modo | = 401 | No fix listed |
References
- 62669 vdb-entry
- 38784 third-party-advisory
- www.coresecurity.com exploit
- 20100302 Luxology Modo 401 .LXO Integer Overflow mailing-list
- 20100303 CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow mailing-list
- 38460 vdb-entry