• info
• discussion
• exploit
• solution
• references

AWFFull Unspecified Multiple Buffer Overflow Vulnerabilities

AWFFull is prone to multiple buffer-overflow vulnerabilities because it fails to bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

A successful exploit may lead to remote arbitrary code execution with the privileges of the vulnerable application. Failed exploit attemtps will likely result in denial-of-service conditions.

AWFFull 3.7.1 and prior versions are vulnerable to this issue.