ImageEn for Delphi and C++ Builder ImageEn for Delphi and C++ Builder

 

ImageEn Forum
Profile    Join    Active Topics    Forum FAQ    Search this forumSearch
 All Forums
 ImageEn Library for Delphi, C++ and .Net
 ImageEn and IEvolution Support Forum
 Update for vulnerability in iepsd

Note: You must be registered in order to post a reply.
To register, click here. Registration is FREE!

View 
UserName:
Password:
Format  Bold Italicized Underline  Align Left Centered Align Right  Horizontal Rule  Insert Hyperlink   Browse for an image to attach to your post Browse for a zip to attach to your post Insert Code  Insert Quote Insert List
   
Message 

 

Emoji
Smile [:)] Big Smile [:D] Cool [8D] Blush [:I]
Tongue [:P] Evil [):] Wink [;)] Black Eye [B)]
Frown [:(] Shocked [:0] Angry [:(!] Sleepy [|)]
Kisses [:X] Approve [^] Disapprove [V] Question [?]

 
Check here to subscribe to this topic.
   

T O P I C    R E V I E W
jiwoochoi Posted - Oct 13 2016 : 01:57:41
I have used imageEN224 for processing images in my application, but an error appeared when PSD processing. (I'm only using imageEN)




I tried to figure out what's going in there, so I reversed my application with assembly, and found that the function in my application causes heap overflow in PSD image processing (specifically, size-check part)

Function Flow outline (size-check) below:

1) do ROR(assembly) several times for a passed argument of this function.
2) save the returned value of this function to some variable.
3 a value of this variable will be used in representing SIZE inforamtion.
4) If you manipulate this value into higher one, overflowing would be caused.

Here's screenshot for what i've done.



05 A9 -> C1 A9 -> overflow

It tested on OS window 7, window xp sp3.

Also, i could manipulate and control eip(assembly) value with Hex Editor.(this may cause serious problem to my application because this may completely change the flow in my application.

any updates for this issue?
2   L A T E S T    R E P L I E S    (Newest First)
xequte Posted - Oct 17 2016 : 19:25:55
Hi

I've tested the file you emailed me in v6.3.2 and confirmed that it works without error.


Nigel
Xequte Software
www.xequte.com
nigel@xequte.com
xequte Posted - Oct 13 2016 : 03:16:32
Hi Jiwoo

V2.2.4 is over ten years old. There have been enumerable changes to iespd since then, so it is unlikely the issue still exists.

You should upgrade to the latest version at:

http://www.imageen.com/order/#Extensions


A list of changes is available at:

http://www.imageen.com/info/history.html


Nigel
Xequte Software
www.xequte.com
nigel@xequte.com