otsAV '.ofl' File Remote Heap Buffer Overflow Vulnerability
BID:43451
Info
otsAV '.ofl' File Remote Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 43451 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-3812 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 10 2009 12:00AM |
| Updated: | Oct 05 2010 06:30PM |
| Credit: | Mountassif Moad |
| Vulnerable: |
Ots Labs OtsAV TV 1.85.64.0 Ots Labs OtsAV TV 1.77.001 Ots Labs OtsAV Radio 1.85.64.0 Ots Labs OtsAV Radio 1.77.001 Ots Labs OtsAV DJ 1.85.64.0 Ots Labs OtsAV DJ 1.77.001 |
| Not Vulnerable: | |
Discussion
otsAV '.ofl' File Remote Heap Buffer Overflow Vulnerability
otsAV is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
otsAV 1.77.001 and 1.85.64.0 are vulnerable; other versions may also be affected.
otsAV is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
otsAV 1.77.001 and 1.85.64.0 are vulnerable; other versions may also be affected.
Exploit / POC
otsAV '.ofl' File Remote Heap Buffer Overflow Vulnerability
The following proofs-of-concept are available:
The following proofs-of-concept are available:
Solution / Fix
otsAV '.ofl' File Remote Heap Buffer Overflow Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].