Signature Detail

HTTP: ispVM System xcf File Buffer Overflow

This signature detects attempts to exploit a known vulnerability against ispVM System. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

ispVM System is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. Attackers can execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. ispVM System 18.0.2 is vulnerable; other versions may also be affected.

Affected Products

• Lattice Semiconductor ispVM System 18.0.2

References

• BugTraq: 53562