PT-2020-7239
CVE-2012-4750
·
Published
2020-01-13
·
Updated
2020-01-22
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Ezhometech EzServer version 7.0
Description
A code execution issue exists in the
memcpy function when processing AMF requests, potentially allowing a remote malicious user to execute arbitrary code or cause a Denial of Service.Recommendations
For Ezhometech EzServer version 7.0, consider restricting access to the
memcpy function until a patch is available. As a temporary workaround, avoid using the AMF request processing feature in Ezhometech EzServer version 7.0 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue. Found an issue in the description? Have something to add? Feel free to write us 👾