| शीर्षक | vivotek SD9364 VVTK-0103f buffer overflow |
|---|
| विवरण | vivotek SD9364 has stack buffer overflow vulnerability in httpd.The program receives the HTTP message sent by the attacker through the read function at line 77, and obtains the value of the Content-Length field through the code from lines 87 to 90, copying this value into a local variable on the stack. Since there is no length check on the value of the Content-Length field, the attacker can write data of any length to the stack, ultimately causing a stack overflow. |
|---|
| स्रोत | ⚠️ https://yjz233.notion.site/vivotek-SD9364-has-stack-buffer-overflow-vulnerability-in-httpd-c9dabd0511d04093865d1d75110429d1?pvs=4 |
|---|
| उपयोगकर्ता | jylsec (UID 60282) |
|---|
| सबमिशन | 31/07/2024 03:32 PM (2 साल पहले) |
|---|
| संयम | 02/08/2024 11:36 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 273526 [Vivotek SD9364 VVTK-0103f httpd read Content-Length बफ़र ओवरफ़्लो] |
|---|
| अंक | 17 |
|---|