Summary
This host is running TVMOBiLi Media Server and is prone to multiple buffer overflow vulnerabilities.
Impact
Successful exploitation will allow remote attackers to execute the arbitrary code or cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
Impact Level: System/Application
Solution
Update to TVMOBiLi Media Server 2.1.3974 or later, For updates refer to http://www.tvmobili.com/
Insight
Improper handling of URI length within the 'HttpUtils.dll' dynamic-link library. A remote attacker can send a specially crafted HTTP GET request of 161, 257, 255 or HTTP HEAD request of 255, 257 or 260 characters long to 30888/TCP port and cause a stack-based buffer overrun that will crash tvMobiliService service.
Affected
TVMOBiLi Media Server version 2.1.0.3557 and prior
References
Severity
Classification
-
CVE CVE-2012-5451 -
CVSS Base Score: 9.0
AV:N/AC:L/Au:N/C:P/I:P/A:C
Related Vulnerabilities
- Google Chrome Multiple Denial of Service Vulnerabilities - March12 (Mac OS X)
- Adobe Reader/Acrobat JavaScript Method Handling Vulnerability (Windows)
- Adobe Flash Player/Air Multiple Vulnerabilities - August10 (Win)
- Asterisk IAX2 Call Number Exhaustion DOS Vulnerability (Linux)
- CesarFTP MKD Command Buffer Overflow