BID:10340

Triornis ZoneMinder Multiple Remote Buffer Overflow Vulnerabilities

Info

Triornis ZoneMinder Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	10340
Class:	Boundary Condition Error
CVE:	CVE-2004-0227
Remote:	Yes
Local:	No
Published:	May 13 2004 12:00AM
Updated:	Jul 12 2009 04:07AM
Credit:	Discovery of this issue is credited to Mark J Cox <[email protected]>.
Vulnerable:	Triornis ZoneMinder 1.19.1 Triornis ZoneMinder 1.19 .0 Triornis ZoneMinder 1.18.1 Triornis ZoneMinder 1.18 .0 Triornis ZoneMinder 1.17.2 Triornis ZoneMinder 1.17.1 Triornis ZoneMinder 1.17 .0

Not Vulnerable:	Triornis ZoneMinder 1.19.3 Triornis ZoneMinder 1.19.2

Discussion

Triornis ZoneMinder Multiple Remote Buffer Overflow Vulnerabilities

Reportedly ZoneMinder is affected by multiple remote buffer overflow vulnerabilities, potentially leading to unauthorized access. These issues are due to a failure of the application to properly validate buffer boundaries when processing user input.

These issues could allow a remote attacker to execute arbitrary code in the context of the affected software, which could lead to unauthorized access.

Exploit / POC

Triornis ZoneMinder Multiple Remote Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Triornis ZoneMinder Multiple Remote Buffer Overflow Vulnerabilities

Solution:
The vendor has released an upgrade that resolves these issues.

Triornis ZoneMinder 1.17 .0