Sony VAIO Media Integrated Server Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	19561
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 16 2006 12:00AM
Updated:	Aug 17 2006 08:25PM
Credit:	Pentest Limited discovered this vulnerability.
Vulnerable:	Sony VAIO Media Integrated Server 5 Sony VAIO Media Integrated Server 4
Not Vulnerable:

Sony VAIO Media Integrated Server Unspecified Buffer Overflow Vulnerability

Sony VAIO Media Integrated Server is prone to an unspecified buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Remote attackers may crash the application or execute arbitrary machine code with SYTEM privileges.

Versions 4.x and 5.x of the application are prone to this vulnerability. Other versions may also be affected.

Sony VAIO Media Integrated Server Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please email us at: [email protected]

Sony VAIO Media Integrated Server Unspecified Buffer Overflow Vulnerability

Solution:
Updates are available to address this issue. Please contact the vendor for details.

Sony VAIO Media Integrated Server Unspecified Buffer Overflow Vulnerability

References:

• Buffer overflow creates a vulnerability in VAIO Media Server. (Sony)
  
• Multiple critical vulnerabilities affecting Sony VAIO Media Integrated Server (Pentest Limited)
  
• Vendor Homepage (Sony)