SIDVault is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds- check user-supplied input before copying it to an insufficiently sized memory buffer. An attacker can exploit these issues to execute arbitrary code with superuser privileges. Successfully exploiting these issues will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial-of-service condition. These issues affect versions prior to SIDVault 2.0f.

The vendor released SIDVault 2.0f to address this issue. Please see the references for more information.

• http://www.securityfocus.com/archive/1/477821
• http://www.securityfocus.com/bid/25460

---

Updated on 2017-03-28