Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
BID:44522
Info
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
| Bugtraq ID: | 44522 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2010 12:00AM |
| Updated: | Oct 29 2010 05:08PM |
| Credit: | n00b |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
Platinum UPnP is prone to a buffer-overflow vulnerability because it fails to properly bounds check user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Successful exploits will compromise the application that uses the library and possibly the underlying computer. Failed exploit attempts will result in a denial-of-service condition.
Platinum UPnP 0.6.0 is vulnerable; other versions may also be affected.
Platinum UPnP is prone to a buffer-overflow vulnerability because it fails to properly bounds check user-supplied data.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Successful exploits will compromise the application that uses the library and possibly the underlying computer. Failed exploit attempts will result in a denial-of-service condition.
Platinum UPnP 0.6.0 is vulnerable; other versions may also be affected.
Exploit / POC
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
The following proof of concept is available:
The following proof of concept is available:
Solution / Fix
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Platinum UPnP Library Post UPnP Buffer Overflow Vulnerability
References:
References:
- Platinum UPnP 0.6.1 Changelog (Plutinosoft)
- Platinum UPnP Homepage (Plutinosoft)