CVE-2009-4643 Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arb...
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL command to the NeoterisSetupService named pipe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper odyssey access client | = 4.72.11421.0 | No fix listed |
References
- 20091203 Juniper Installer Service Stack Buffer Overflow Vulnerability third-party-advisory
- www.juniper.net