PT-2015-3531

CVE-2012-5451

·

Publicado

2015-04-24

·

Atualizado

2015-04-27

Descrição por

CVSS 2.0
5.0
Média
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions TVMOBiLi versions prior to 2.1.0.3974
Description The issue is related to multiple stack-based buffer overflows in HttpUtils.dll, which can be exploited by remote attackers. This can be achieved by sending a long string in a GET or HEAD request to TCP port 30888, resulting in a denial of service, specifically causing the tvMobiliService service to crash.
Recommendations For versions prior to 2.1.0.3974, update to version 2.1.0.3974 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 30888 to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾