-----------------------------------------------------------------------------------

Deimos Kasa <= 2.58 (table) Local Integer Overflow Vulnerability


Summary: Deimos Kasa is a Windows restaurant  management software.

Desc: Deimos Kasa is prone to an integer overflow vulnerability because
      it fails to perform adequate boundary checks on user-supplied input
      in the table field. Successfully exploiting these issues may allow
      local attackers to execute arbitrary code in the context of the
      application. Failed exploit attempts will cause denial-of-service
      conditions.

Product web page: http://www.planet.com.mk

Vendor: Planet Interactive DOO

Version Affected: 2.22.0.0, 2.49.0.0, 2.55.0.0 and 2.58.0.0

Tested on Microsoft Windows XP Professional SP2 (English)

Vulnerability discovered by Gjoko 'LiquidWorm' Krstic

liquidworm gmail com

Zero Science Lab - http://www.zeroscience.mk

12.12.2009

Advisory: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4929.php

-----------------------------------------------------------------------------------


PoC:

The issue can be triggered by entering 10+ integers in the Table field (no pass needed).

Masa field: 1111111111 [ENTER]

//EOF