header-logo
Suggest Exploit
vendor:
Photon MicroGUI
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
Buffer Overflow
CWE
Product Name: Photon MicroGUI
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: Unknown
Related CWE: Unknown
CPE: Unknown
Metasploit:
Other Scripts:
Platforms Tested: Unknown
Unknown

Multiple Buffer Overflow Vulnerabilities in QNX Photon MicroGUI

QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers. An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.

Mitigation:

It is recommended to apply the latest patches and updates provided by the vendor. Additionally, restrict access to the vulnerable applications and ensure that user-supplied input is properly validated and sanitized.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/11164/info
 
Reportedly QNX Photon MicroGUI is affected by multiple buffer overflow vulnerabilities in MicroGUI utilities. These issues are due to a failure of the affected applications to validate user-supplied string lengths before copying them into finite process buffers.
 
An attacker may leverage these issues to execute arbitrary code on the affected system within the context of the vulnerable applications; the applications are typically setuid applications.

$ /usr/photon/bin/input-cfg -s AAAAA[...]

Navigation

Suggest Exploit

Services By CQR