Lucene search

K
zdiRgodZDI-15-412
HistorySep 02, 2015 - 12:00 a.m.

(0Day) Borland AccuRev Reprise License Server activate_doit Command akey Parameter Stack Buffer Overflow Vulnerability

2015-09-0200:00:00
rgod
www.zerodayinitiative.com
14

EPSS

0.951

Percentile

99.4%

This vulnerability allows remote attackers to cause a stack buffer overflow in the Reprise License Management service on installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the activate_doit function of the service. The issue lies in the handling of the akey parameter which can result in overflowing a stack-based buffer. An attacker could leverage this vulnerability to execute code under the context of SYSTEM.

EPSS

0.951

Percentile

99.4%

Related for ZDI-15-412