Multiple AirTies Air Products CVE-2015-2797 Stack Buffer Overflow Vulnerability

Bugtraq ID:	75355
Class:	Boundary Condition Error
CVE:	CVE-2015-2797
Remote:	Yes
Local:	No
Published:	Jun 23 2015 12:00AM
Updated:	Jun 23 2015 12:00AM
Credit:	Batuhan Burakcin
Vulnerable:	AirTies Air 6372 AirTies Air 5760 AirTies Air 5750 AirTies Air 5650tt AirTies Air 5453 AirTies Air 5444tt AirTies Air 5443 AirTies Air 5442 AirTies Air 5343 AirTies Air 5342 AirTies Air 5341 AirTies Air 5021 AirTies Air 1.0.2.0
Not Vulnerable:

Multiple AirTies Air Products CVE-2015-2797 Stack Buffer Overflow Vulnerability

Multiple AirTies Air products are prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

A remote attacker may exploit this issue to execute arbitrary code in the context of the affected device. Failed attempts will likely cause a denial-of-service condition.

Multiple AirTies Air Products CVE-2015-2797 Stack Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/75355.rb
• /data/vulnerabilities/exploits/75355.py

Multiple AirTies Air Products CVE-2015-2797 Stack Buffer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple AirTies Air Products CVE-2015-2797 Stack Buffer Overflow Vulnerability

References:

• Exploiting the Airties Air Series (BMicrosystems)
  
• Vendor Home Page (AirTies)