CVE-2014-0766: Advantech WebAccess Stack-based Buffer Overflow
An attacker can exploit this vulnerability by copying an overly long NodeName2 argument into a statically sized buffer on the stack to overflow the static stack buffer. An attacker may use this vulnerability to remotely execute arbitrary code.
Other sources
Stack-based buffer overflow in Advantech WebAccess before 7.2 allows remote attackers to execute arbitrary code via a long NodeName2 argument.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech WebAccessto a version that resolves this vulnerability.Fixed in 7.2
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0766?
CVE-2014-0766 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2014-0766?
To address CVE-2014-0766, upgrade Advantech WebAccess to version 7.2 or later.
What software versions are affected by CVE-2014-0766?
CVE-2014-0766 affects Advantech WebAccess versions up to and including 7.1, as well as versions 5.0, 6.0, and 7.0.
Can CVE-2014-0766 be exploited remotely?
Yes, CVE-2014-0766 can be exploited remotely by attackers through specially crafted NodeName2 arguments.
What is the nature of the vulnerability in CVE-2014-0766?
The vulnerability in CVE-2014-0766 is a stack-based buffer overflow, allowing attackers to execute arbitrary code.