CVE-2007-2952 Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long....
HighCVSS 9.3
EPSS 15.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple stack-based buffer overflows in the filter service (aka k9filter.exe) in Blue Coat K9 Web Protection 3.2.44 with Filter 3.2.32 allow (1) remote attackers to execute arbitrary code via a long HTTP Referer header to the K9 Web Protection Administration interface and (2) man-in-the-middle attackers to execute arbitrary code via an HTTP response with a long HTTP version field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blue coat systems filter | = 3.2.32 | No fix listed |
| blue coat systems k9 web protection | = 3.2.44 | No fix listed |
References
- 25813 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- secunia.com vendor-advisory
- 20080731 Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow mailing-list
- 20080731 Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows mailing-list
- 30463 vdb-entry
- 30464 vdb-entry
- 1020587 vdb-entry
- 1020588 vdb-entry
- ADV-2008-2263 vdb-entry
- bluecoat-k9-referer-bo(44123) vdb-entry
- bluecoat-k9-version-bo(44124) vdb-entry