ArduinoJson JSON Strings Processing Buffer Overflow Vulnerability
BID:75150
Info
ArduinoJson JSON Strings Processing Buffer Overflow Vulnerability
| Bugtraq ID: | 75150 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2015-4590 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 11 2015 12:00AM |
| Updated: | Jul 15 2015 12:35AM |
| Credit: | Giancarlo Canales |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
ArduinoJson JSON Strings Processing Buffer Overflow Vulnerability
ArduinoJson is prone to a buffer overflow vulnerability because it fails to adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the application.
ArduinoJson is prone to a buffer overflow vulnerability because it fails to adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the application.
Exploit / POC
ArduinoJson JSON Strings Processing Buffer Overflow Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
ArduinoJson JSON Strings Processing Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
ArduinoJson JSON Strings Processing Buffer Overflow Vulnerability
References:
References: