NetSight
high7.6

CVE-2011-2778

Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitra…

Impact

Multiple heap-based buffer overflows in Tor before 0.2.2.35 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by (1) establishing a SOCKS connection to SocksPort or (2) leveraging a SOCKS proxy configuration.

Affected products

VendorProductAffected versions
TorTor
through 0.2.2.34
Versions 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6

Weakness classification

References