This host is installed with Tor and is prone to buffer overflow vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions. Impact level: Application

Upgrade to Tor version 0.2.1.30 or later http://www.torproject.org/download/download.html.en

The flaw is caused by an boundary error within the policy_summarize function in Tor, which can be exploited to crash a Tor directory authority.

Tor version prior to 0.2.1.30 on Windows.

• http://secunia.com/advisories/43548

---

Updated on 2015-03-25