CVE-2014-9451

VDG Security SENSE (formerly DIVA) 2.3.13 web service API /webservice has multiple stack-based buffer overflows in the AuthenticateUser API (user/password), enabling remote code execution. CVSSv2 base score 7.5 (HIGH). Some scanners mark remediation as WillNotFix; no explicit fixes detailed in th...