high7.5Public exploit code
CVE-2004-1854
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PicoPhone Internet Phone 1.63 - Remote Buffer Overflow2004-03-24 · dos · hardware · Verified
Impact
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Picophone | Internet Telephone | Version 1.63 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/picobof-adv.txt
- http://marc.info/?l=bugtraq&m=108016032220647&w=2
- http://secunia.com/advisories/11209
- http://securitytracker.com/id?1009551
- http://www.osvdb.org/4550
- http://www.securityfocus.com/bid/9969
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15595
- http://aluigi.altervista.org/adv/picobof-adv.txt
- http://marc.info/?l=bugtraq&m=108016032220647&w=2
- http://secunia.com/advisories/11209
- http://securitytracker.com/id?1009551
- http://www.osvdb.org/4550
- http://www.securityfocus.com/bid/9969
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15595