EUVD-2009-1669

Malware in sbrugna...

Stack overflow

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a TOOLSETTINGS section in a .mcp file, possibly a related issue to CVE-2009-1608...

CVE-2009-1608

CVE-2009-1608 concerns multiple buffer overflows in Microchip MPLAB IDE 8.30 (and possibly earlier versions) that allow user-assisted remote attackers to execute arbitrary code via a long .MCP project file. The overflow targets fields such as (1) FILE_INFO and (2) CAT_FILTERS within a .MCP, enabl...