SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Posted Authored by Site Secunia Research has discovered a vulnerability in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by a boundary error in the 'Install3rdPartyComponent()' method in the 'Aventail.EPInstaller' ActiveX control when creating an absolute path name based on values in the 'CabURL' and 'Location' arguments.

This can be exploited to cause a stack-based buffer overflow via overly long values. Successful exploitation allows execution of arbitrary code. Tags ,,, advisories MD5 c4af04d7c30dd03dda3e8f . Genie Fam Rapidshare. Epox Ep-8rda Drivers more.

Aventail Access Manager program is developed by the company named SonicWALL, Inc. Aventail Access Manager Installer). Interrogator/Installer Module. WALL SSL- VPN End- Point Interrogator/Installer Active. X Control Buffer Overflow Lets Remote Users Execute Arbitrary Code. HerdProtect antiviru scan for the file EPI.DLL. End-Point Interrogator/Installer Module. Microsoft Software Validation v2, O=SonicWALL Inc., L=Sunnyvale. SonicWALL SSL VPN provides secure remote access to mission-critical resources from any endpoint including desktops, laptops, PDAs and smartphones. Zeljko Joksimovic Arena Rapidshare. SonicWALL SSL VPN.