Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

WSMP3 Remote Heap Corruption Vulnerability

A remotely exploitable heap corruption vulnerability has been reported for WSMP3.

Due to insufficient bounds checking of user-supplied input, it is possible for a remote attacker to corrupt heap memory. By corrupting allocated memory headers, it is possible to redirect program flow when the free() function is called.

Successful exploitation of this issue may result in remote execution of arbitrary code with root privileges.







 

Privacy Statement
Copyright 2009, SecurityFocus