JVN#36635562 nProtect : Netizen denial of service (DoS) vulnerability

Overview

nProtect : Netizen contains a denial of service (DoS) vulnerability.

Products Affected

npstarter.ocx of nProtect : Netizen Ver5 prior to version "2008, 6, 16, 1"

For more information, refer to the vendor's website.

Description

nProtect : Netizen from NetMove Corporation is security software that works only while communicating with specific web pages. nProtect : Netizen contains a denial of service (DoS) vulnerability.

Impact

An remote attacker could disable nProtect : Netizen by convincing a user to open a specially crafted web page.

Solution

Update the Software
Apply the latest update provided by the vendor.

Vendor Status

Vendor	Status	Last Update	Vendor Notes
NetMove Corporation	Vulnerable	2008/06/25

References

JPCERT/CC Addendum

The vendor has released the information regarding this issue on June 20 2008.

Vulnerability Analysis by JPCERT/CC

Analyzed on 2008.06.25

Measures	Conditions	Severity
Access Required	Routed - can be attacked over the Internet using packets	High
Authentication	None - anonymous or no authentication (IP addresses do not count)	High
User Interaction Required	Simple - the user must be convinced to take a standard action that does not feel harmful to most users, such as click on a link or view a file	Medium
Exploit Complexity	Low-Medium - some expertise and/or luck required (most buffer overflows, guessing correctly in small space, expertise in Windows function calls)	Medium-High

Description of each analysis measures

Credit

Yuji Ukai of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the vendor under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE
JVN iPedia	JVNDB-2008-000032