[2/5] PWLib “PString::vsprintf()” Denial of Service Vulnerability
:A vulnerability has been discovered in PWLib, which can be exploited by malicious people to cause a DoS (Denial of Service).The vulnerability is caused due to an error within the "PString::vsprintf()" method in src/ptlib/common/contain.cxx. This can be exploited to cause a memory corruption by e.g. tricking an application using the library to use this function with a string longer than 1000 bytes.The vulnerability is confirmed in version 1.10.4-1 for Fedora Core 6. Other versions may also be affected.Solution:Use applications linked against PWLib in trusted environments and trusted data only.Provided and/or discovered by:Reported in a Red Hat advisory.Original Advisory:http://rhn.redhat.com/errata/RHSA-2007-0932.html
Original post by nitish
Posted in Advisories - Exploits |
| [2/5] PWLib “PString::vsprintf()” Denial of Service Vulnerability