CVE-2009-4643

CRITICO 10.0CVE-2009-4643 · Published 15/02/2010 · updated 16/06/2026

In breve

CVE-2009-4643 è una vulnerabilità CRITICO (CVSS 10.0) che riguarda odyssey access client (juniper).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.7%, superiore al 89.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
odyssey access client juniper	`= 4.72.11421.0`	No fix yet

Description

Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL command to the NeoterisSetupService named pipe.

References

labs.idefense.com/intelligence/vulnerabilities/display.php
juniper.net/alerts/viewalert.jsp

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free