PT-2013-1278 · Unknown · Линтер Бастион

Publicado

2013-10-20

·

Atualizado

2013-10-20

CVSS v2.0

8.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Линтер Бастион (affected versions not specified)
Description The issue is related to the absence of input validation in the sub 4101B4 procedure, which can lead to a heap buffer overflow when processing a specific RPC call (0x13 0x12) at addresses 0x004104D1, 0x004105AB, and 0x004105EA. This can allow a remote attacker to execute arbitrary code with system privileges or disrupt the operation of linstmgr.exe.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2015-10108

Produtos afetados

Линтер Бастион