Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	44547
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 29 2010 12:00AM
Updated:	Oct 29 2010 12:00AM
Credit:	Reported by the vendor.
Vulnerable:
Not Vulnerable:

Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities

Platinum UPnP is prone to multiple buffer-overflow vulnerabilities because it fails to properly bounds check user-supplied data.

An attacker can exploit these issues to execute arbitrary code within the context of the affected application. Successful exploits will compromise the application that uses the library and possibly the underlying computer. Failed exploit attempts will result in a denial-of-service condition.

Platinum UPnP 0.6.0 is vulnerable; other versions may also be affected.

Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Platinum UPnP Library Multiple Buffer Overflow Vulnerabilities

References:

• Platinum UPnP 0.6.1 Changelog (Plutinosoft)
  
• Platinum UPnP Homepage (Plutinosoft)