Shareaza Multiple Remote Integer Overflow Vulnerabilities
BID:16399
Info
Shareaza Multiple Remote Integer Overflow Vulnerabilities
| Bugtraq ID: | 16399 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2006 12:00AM |
| Updated: | Feb 07 2006 08:55PM |
| Credit: | Discovered by Ryan Smith <[email protected]>. |
| Vulnerable: |
Shareaza Shareaza 2.2.1 0 |
| Not Vulnerable: | |
Discussion
Shareaza Multiple Remote Integer Overflow Vulnerabilities
Shareaza is prone to multiple integer-overflow vulnerabilities. These issues are due to the application's failure to properly ensure that user-supplied input does not result in the overflowing of integer values. This may result in data being copied past the end of a memory buffer.
Attackers may exploit these vulnerabilities to execute arbitrary code in the context of the application.
Shareaza 2.2.1.0 is reportedly vulnerable. Other versions may be affected as well.
Shareaza is prone to multiple integer-overflow vulnerabilities. These issues are due to the application's failure to properly ensure that user-supplied input does not result in the overflowing of integer values. This may result in data being copied past the end of a memory buffer.
Attackers may exploit these vulnerabilities to execute arbitrary code in the context of the application.
Shareaza 2.2.1.0 is reportedly vulnerable. Other versions may be affected as well.
Exploit / POC
Shareaza Multiple Remote Integer Overflow Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Shareaza Multiple Remote Integer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
Shareaza Multiple Remote Integer Overflow Vulnerabilities
References:
References:
- Shareaza (Ryan Smith)
- Shareaza Homepage (Shareaza)