vendor:
Switch Off
by:
MrNice
7.5
CVSS
HIGH
Buffer overrun
119
CWE
Product Name: Switch Off
Affected Version From: Unknown
Affected Version To: 2.3
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Windows 2000 SP0, Windows XP SP0
2004
YaSoft Switch Off software package buffer overrun vulnerability
A vulnerability has been identified in the YaSoft Switch Off software package when handling message requests. The buffer overrun condition exists in the 'swnet.dll' module of the software due to insufficient bounds checking performed by the affected component. The overflow may be caused by sending an excessively long 'message' parameter to the application. This may make it possible for a remote user to execute arbitrary code through a vulnerable server.
Mitigation:
Apply the latest security patches or updates provided by the vendor.