PT-2012-1500
CVE-2011-0524
·
Publicado
2012-08-13
·
Atualizado
2013-12-13
Descrição por
CVSS 2.0
2.1
BaixaMétricasAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
gypsy version 0.8
Description
The issue is related to multiple buffer overflows in the NMEA parser, located in the nmea-gen.c file. This can be exploited by local users to cause a denial of service, resulting in a crash. The vulnerability is connected to unspecified vectors related to the sprintf function.
Recommendations
For gypsy version 0.8, consider applying patches or updates that address the buffer overflows in the NMEA parser to prevent denial of service attacks. As a temporary workaround, restrict access to the NMEA parser functionality until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾