VisiWave Site Survey '.vwr' File Processing Buffer Overflow Vulnerability
BID:47948
Info
VisiWave Site Survey '.vwr' File Processing Buffer Overflow Vulnerability
| Bugtraq ID: | 47948 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-2386 |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2011 12:00AM |
| Updated: | Apr 13 2015 09:01PM |
| Credit: | mr_me |
| Vulnerable: |
AZO Technologies, Inc. VisiWave Site Survey 2.0.12 |
| Not Vulnerable: |
AZO Technologies, Inc. VisiWave Site Survey 2.1.9 |
Discussion
VisiWave Site Survey '.vwr' File Processing Buffer Overflow Vulnerability
VisiWave Site Survey is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
VisiWave Site Survey versions prior to 2.1.9 are vulnerable.
VisiWave Site Survey is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
VisiWave Site Survey versions prior to 2.1.9 are vulnerable.
Solution / Fix
VisiWave Site Survey '.vwr' File Processing Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.