0
Schwerer BUG in Outpost Firewall PRO 4.0 (964.582.059) produziert System-Crash
Outpost Insufficient validation of 'SandBox' driver input buffer...
Advisory 2006-11-01.01 by Matousec-Crew
Description:
Outpost insufficiently protects its driver \Device\SandBox against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send arbitrary data to it, which are implicitly believed to be valid. It is possible to assemble the data in the input buffer such that the driver performs an invalid memory operation and crashes the whole operating system. Further impacts of this bug were not examined.
Vulnerable software:
Advisory 2006-11-01.01 by Matousec-Crew
Description:
Outpost insufficiently protects its driver \Device\SandBox against a manipulation by malicious applications and it fails to validate its input buffer. It is possible to open this driver and send arbitrary data to it, which are implicitly believed to be valid. It is possible to assemble the data in the input buffer such that the driver performs an invalid memory operation and crashes the whole operating system. Further impacts of this bug were not examined.
Vulnerable software:
- Outpost Firewall PRO 4.0 (964.582.059)
- 2006-11-01: Advisory released
- 2006-11-01: Vendor notification
Events:
Die Bekanntgabe dieses Bugs erschien heute, 01.11.206, auf:
http://www.matousec.com/info/advisories/Outpost-Insufficient-validation ...
Dort ist uebrigends auch der Downloadlink zur Testdatei BTP00001P004AO.zip
saludos
gnarff
[N.B.:haette ich das auf deutsch uebersetzen sollen...?]
Auf Facebook teilen
Auf Twitter teilen
Auf Reddit teilen
Auf Linkedin teilenBitte markiere auch die Kommentare, die zur Lösung des Beitrags beigetragen haben
Content-ID: 43535
Url: https://administrator.de/forum/schwerer-bug-in-outpost-firewall-pro-4-0-964-582-059-produziert-system-crash-43535.html
Ausgedruckt am: 15.01.2025 um 10:01 Uhr
