MPLAB.IDE.MCP.Buffer.Overflow

Release Date Jul 02, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in Microchip MPLAB IDE. The vulnerability is caused by an error when the vulnerable software handles a malicious .mcp file. It allows a remote attacker to execute arbitrary code.
Affected Products Microchip MPLAB IDE 8.30 and possibly earlier.
Recommended Actions Do not open untrusted .mcp files with MPLAB IDE.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-1608
Reference/s http://www.securityfocus.com/bid/34897 (BugTraq)

Fortinet