CVE-2010-0553 Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long NMEA data sentence.
MediumCVSS 6.5
EPSS 3.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long NMEA data sentence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| geopp geo++ gncaster | <= 1.4.0.7 | No fix listed |
| geopp geo++ gncaster | = 1.4.0.0 | No fix listed |
References
- 62012 vdb-entry
- 38323 third-party-advisory vendor-advisory
- www.redteam-pentesting.de exploit
- 20100127 [RT-SA-2010-002] Geo++(R) GNCASTER: Insecure handling of NMEA-data mailing-list
- gncaster-nmea-code-execution(55975) vdb-entry