Bugtraq mailing list archives

iodine client 0.3.2 buffer overflow

From: poplix () papuasia org
Date: 2 Nov 2006 18:12:09 -0000

hi,
iodine client 0.3.2, available at http://code.kryo.se/iodine/ , suffers from a stack-based buffer overflow 
vulnerability which could result in the execution of arbitrary code.  
A specially crafted dns response sent through an UDP packet can be used to exploit this issue.

cheers
-p

Current thread:

iodine client 0.3.2 buffer overflow poplix (Nov 02)