Blue Coat K9 Web Protection Centralized Server HTTP Responses Buffer Overflow Vulnerability

Blue Coat K9 Web Protection Centralized Server HTTP Responses Buffer Overflow Vulnerability

Blue Coat K9 Web Protection is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks when receiving HTTP responses from the centralized server 'sp.cwfservice.net'.

Attackers can exploit this issue via man-in-the-middle attacks to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.3 is affected; other versions may also be affected.