|
OmniHTTPD Buffer Overflow Vulnerability
Solution: Since source code for the imagemap program is supplied, UNYUN of Shadow Penguin Security suggests that checking for oversized arguments be added to the code: void main(int argc, char **argv) { ----------- omit ---------- char OutString[100]; ----------- omit ---------- if(argc >= 2) { // // extract x & y from passed values // strcpy(OutString, argv[1]); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Buffer overflow caused by this strcpy(). This overflow can be avoided if you put the following code before strcpy(). if (strlen(argv[1])>99) exit There are no known vendor provided solutions to this problem. |
|
|
Privacy Statement |
