Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Qualcomm qpopper Remote Buffer Overflow Vulnerability

There is a buffer overflow vulnerability present in current (3.x) versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the host running qpopper can be completely compromised anonymously. The problem is in pop_msg.c, around line 68 and is the result of vsprintf() or sprintf() calls without bounds checking.







 

Privacy Statement
Copyright 2009, SecurityFocus