Description
Buffer overflow in pirs32.exe in Poslovni informator Republike Slovenije (PIRS) 2007 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long search string in certain fields in the GUI. NOTE: this may cross privilege boundaries if PIRS is used by data-entry workers who do not have full access to the underlying Windows environment.
References
- 2898 third-party-advisory
- 38697 vdb-entry
- 20070713 PIRS2007 local buffer overflow vulnerability mailing-list
- http://www.pirs.si/slo/index.php?dep_id=29&help_id=60
- pirs-pirs32-bo(35388) vdb-entry