Description
Integer overflow in the Swap4 function in valet4.dll in Luxology Modo 401 allows user-assisted remote attackers to execute arbitrary code via a .LXO file containing a CHNL subchunk associated with an invalid length.
References
- 20100302 Luxology Modo 401 .LXO Integer Overflow mailing-list
- 20100303 CORRECTION: CORE-2009-0913 - Luxology Modo 401 .LXO Integer Overflow mailing-list
- http://www.coresecurity.com/content/luxology-modo-lxo-vulnerability
- 38784 third-party-advisory
- 62669 vdb-entry
- 38460 vdb-entry