CVE-2012-2427: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation...

PT-2012-4039

Name of the Vulnerable Software and Affected Versions xArrow versions prior to 3.4.1 Description The issue is related to an integer overflow in the server, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a crafted packet that triggers an...

CVE-2012-2428: Undefined Security Weakness

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

PT-2012-4040

Name of the Vulnerable Software and Affected Versions xArrow versions prior to 3.4.1 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors due to an invalid read operation performed by the server. Recommendations For versions prior to 3.4.1, update to...

PT-2012-4038

Name of the Vulnerable Software and Affected Versions xArrow versions prior to 3.4.1 Description The issue is related to a heap-based buffer overflow in the server, which can be triggered by remote attackers sending packets that cause an invalid free operation, potentially allowing the execution ...

PT-2012-4037

Name of the Vulnerable Software and Affected Versions xArrow versions prior to 3.4.1 Description The issue is related to improper memory allocation by the server, which can be exploited by remote attackers to cause a denial of service. This is achieved through unspecified vectors, resulting in a...

xArrow Multiple Vulnerabilities

Overview This advisory is a follow-up to ICS-ALERT-12-065-01 xArrow Vulnerabilities that was published March 05, 2012. Independent security researcher Luigi Auriemma identified and released four security vulnerabilities, along with proof-of-concept code, in the xArrow software application without...