The vulnerability documented in this advisory is remotely exploitable yet we are releasing it on a Friday. We don't see this as adding any additional risk to DocumentDirect customers. The vendor, Mobius, has assured us that they have contacted all their customers and given them a fixed version of the software.
Clients access the document management system using a standard web browser.
DocumentDirect's interface is customizable for each enterprise's environment. It supports multiple document types, including PostScript, PDF, and various word processing and image file formats. There are several different buffer overflow conditions in the DocumentDirect for the Internet web application that could result in the execution of arbitrary code, or at the very least, a denial of service against the DocumentDirect Process Manager. In this instance, if the field ID consists of at least 1553 A's, the flow of execution returns immediately to 0x41414141. A properly crafted string could easily result in the execution of malicious code.