InterSystems Caché UtilConfigHome.csp Stack Buffer Overflow

A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.

N/A

栈缓冲区溢出

InterSystems Caché 安全漏洞

InterSystems Caché是美国InterSystems公司的一套数据库管理系统。该系统主要用于开发医疗保健管理、银行和金融服务、政府和其他行业的软件应用程序。 InterSystems Caché2009.1版本存在安全漏洞，该漏洞源于UtilConfigHome.csp端点未充分检查边界，可能导致栈缓冲区溢出和执行任意代码。

N/A

N/A