CVE-2008-2654
13.06.2008, 18:41
Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.Enginsight
| Vendor | Product | Version |
|---|---|---|
| lavrsen | motion | 𝑥 ≤ 3.2.10 |
| lavrsen | motion | 3.1.17 |
| lavrsen | motion | 3.1.18 |
| lavrsen | motion | 3.1.19 |
| lavrsen | motion | 3.1.20 |
| lavrsen | motion | 3.2.1 |
| lavrsen | motion | 3.2.2 |
| lavrsen | motion | 3.2.3 |
| lavrsen | motion | 3.2.4 |
| lavrsen | motion | 3.2.5 |
| lavrsen | motion | 3.2.6 |
| lavrsen | motion | 3.2.7 |
| lavrsen | motion | 3.2.8 |
| lavrsen | motion | 3.2.9 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration