BaoFeng Storm '.smpl' File Buffer Overflow Vulnerability Network Vulnerability

Summary

This host is installed with BaoFeng Storm and is prone to Buffer Overflow vulnerability.

Impact

Attacker may exploit this issue to execute arbitrary script code and may cause denial of service. Impact Level: Application

Solution

Upgarde to the latest BaoFeng Storm version 3.09.07.08 http://www.baofeng.com/

Insight

A boundary error occurs in the MediaLib.dll file while processing '.smpl' playlist file containing long pathname in the source attribute of ani item element.

Affected

BaoFeng Storm version 3.09.62 and prior on Windows.

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-06/0287.html
http://marc.info/?l=full-disclosure&m=124627617220913&w=2
http://secunia.com/advisories/35592

Updated on 2015-03-25

Severity

Classification

CVE CVE-2009-2617

CVSS	Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C

Related Vulnerabilities

ALZip MIM File Processing Buffer Overflow Vulnerability
Adobe PageMaker Font Structure Multiple BOF Vulnerabilities
Anzio Web Print Object ActiveX Control Remote BOF Vulnerability
BaoFeng Storm ActiveX Control Buffer Overflow Vulnerability
Avaya WinPDM Multiple Buffer Overflow Vulnerabilities

Take action and discover your vulnerabilities