NetSight
IP …
critical10.0

CVE-2008-2654

Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long reque…

Impact

Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.

Affected products

VendorProductAffected versions
LavrsenMotion
through 3.2.10
Versions 3.1.17, 3.1.18, 3.1.19, 3.1.20, 3.2.1

Weakness classification

CWE-189

References