CVE-2008-2654

Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.
Configurations

Configuration 1

cpe:2.3:a:lavrsen:motion:3.1.20:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.9:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.6:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.1.19:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.1.18:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:*:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.7:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.1.17:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:lavrsen:motion:3.2.8:*:*:*:*:*:*:*

Information

Published : 2008-06-13 06:41

Updated : 2017-08-08 01:31


NVD link : CVE-2008-2654

Mitre link : CVE-2008-2654

Products Affected
No products.
CWE