Isamu Kaneko Winny Buffer Overflow and Denial of Service Vulnerabilities

Bugtraq ID:	42887
Class:	Unknown
CVE:	CVE-2010-2360 CVE-2010-2361 CVE-2010-2362
Remote:	Yes
Local:	No
Published:	Aug 20 2010 12:00AM
Updated:	Aug 20 2010 12:00AM
Credit:	Moti Joseph and Kobi Pariente, Yuji Ukai of eEye Digital Security, Fuyumasa Takatsu of University of Tsukuba
Vulnerable:
Not Vulnerable:

Isamu Kaneko Winny Buffer Overflow and Denial of Service Vulnerabilities

Isamu Kaneko Winny is prone to a buffer-overflow vulnerability and multiple denial-of-service vulnerabilities.

Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application, or cause denial-of-service conditions.

Isamu Kaneko Winny Buffer Overflow and Denial of Service Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Isamu Kaneko Winny Buffer Overflow and Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Isamu Kaneko Winny Buffer Overflow and Denial of Service Vulnerabilities

References:

• JVN#25393522 Winny node information processing vulnerability (JVN)
  
• JVN#54336184 Winny BBS information processing vulnerability (JVN)
  
• JVN#91740962 Winny vulnerable to buffer overflow (JVN)
  
• Winny Homepage (Winny)