Desknet's Unspecified Remote Buffer Overflow Vulnerability

Bugtraq ID:	20716
Class:	Boundary Condition Error
CVE:	CVE-2006-5593
Remote:	Yes
Local:	No
Published:	Oct 24 2006 12:00AM
Updated:	Jul 06 2016 01:33PM
Credit:	Virtue Osamu Corporation has been credited with the discovery of this vulnerability.
Vulnerable:	Desknet's Desknet's 4.5J R2.4
Not Vulnerable:	Desknet's Desknet's 5.0J R1.0

Desknet's Unspecified Remote Buffer Overflow Vulnerability

Desknet's is prone to an unspecified remote buffer-overflow vulnerability because it fails to properly bound-check user-supplied input before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. A complete compromise of the computer running the application may be possible.

Versions V4.5J R2.4 and prior are vulnerable.

Desknet's Unspecified Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Desknet's Unspecified Remote Buffer Overflow Vulnerability

Solution:
The vendor has released version V5.0J R1.0 to address this issue; please see the reference section for details.


Desknet's Desknet's 4.5J R2.4

• Desknet's Desknet's fix for version V4.5J R2.4 and prior
  http://www.desknets.com/standard/download/

Desknet's Unspecified Remote Buffer Overflow Vulnerability

References:

• Desknet's Web Site (Desknet's)
  
• JVN Advisory - JVN#07235355 (JVN)