CVE-2002-1441

Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via 1 the Steelarrow Service Steelarrow.exe using a long UserIdent Cookie header, 2 DLLHOST.EXE Steelarrow.dll via a request for a long .aro file, or 3 DLLHOST.EXE via a Chunked...

CVE-2002-1441

Tomahawk SteelArrow (before 4.5) is affected by multiple buffer overflows that allow remote code execution. The vulnerabilities arise from: (1) Steelarrow Service (Steelarrow.exe) accepting a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) handling an oversized .aro file request, a...