medium5.0Public exploit code
CVE-2005-1402
Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mtp-Target Server 1.2.2 - Memory Corruption2005-05-02 · dos · multiple · Verified
Impact
Integer signedness error in certain older versions of the NeL library, as used in Mtp-Target 1.2.2 and earlier, and possibly other products, allows remote attackers to cause a denial of service (memory consumption or server crash) via a negative value in a STLport call, which is not caught by a signed comparison.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mtp-Target | Mtp-Target | through 1.2.2 |