This host is installed with Tor and is prone to heap based buffer overflow vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions. Impact level: Application

Upgrade to version 0.2.1.28 or 0.2.2.20-alpha or later http://www.torproject.org/download/download.html.en

The issue is caused by an unknown heap overflow error when processing user-supplied data, which can be exploited to cause a heap-based buffer overflow.

Tor version prior to 0.2.1.28 and 0.2.2.x before 0.2.2.20-alpha on Linux.

• http://secunia.com/advisories/42536
• http://www.vupen.com/english/advisories/2010/3290

---

Updated on 2015-03-25