|
Platinum UPnP is prone to multiple overflow conditions. The 'PLT_DeviceHost::ProcessHttpPostRequest()', 'PLT_CtrlPoint::ProcessSsdpSearchResponse()', 'PLT_CtrlPoint::ProcessSsdpNotify()', 'PLT_HttpHelper::GetRange()' and 'PLT_HttpHelper::GetContentRange()' functions fail to properly sanitize user-supplied input resulting in a stack-based buffer overflow. With a specially crafted HTTP POST request, SSDP search response, SSDP notify response, or HTTP request, a remote attacker can potentially compromise applications using the library.
|
