Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Motion read_client() 单字节溢出漏洞
Vulnerability Description
Motion是美国苹果（Apple）公司的一套动态图片编辑工具。该工具可对文字、字母进行制作生成动画效果。 Motion的webhttpd守护程序中存在单字节溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 以下是webhttpd.c中的漏洞代码： 1950 static int read_client(int client_socket, void *userdata, char *auth) .... 1954char buffer[1024] = {'\0'}; int length = 1024;
CVSS Information
N/A
Vulnerability Type
N/A