vendor:
AASync
by:
corelanc0d3r
7.5
CVSS
HIGH
Stack Buffer Overflow
Buffer Error
CWE
Product Name: AASync
Affected Version From: 2.2.1.0
Affected Version To: 2.2.1.0
Patch Exists: NO
Related CWE:
CPE: a:aasync:aasync:2.2.1.0
Platforms Tested: Windows
2010
AASync v2.2.1.0 (Win32) Stack Buffer Overflow (LIST)
This module exploits a stack buffer overflow in AASync v2.2.1.0, triggered when processing the response on a LIST command. During the overflow, a structured exception handler record gets overwritten.
Mitigation:
Update to a patched version of AASync.
