CVE-2007-2434 Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed DNS query.
HighCVSS 10.0
EPSS 14.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed DNS query.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aventail connect | <= 4.1.2.13 | No fix listed |
References
- 20070430 Aventail Connect SSL VPN Client Buffer Overflow mailing-list
- 23717 vdb-entry
- ADV-2007-1793 vdb-entry
- aventail-connect-dns-bo(33972) vdb-entry