Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The specific flaw exists within the parsing of vCard data. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-26316.

N/A

栈缓冲区溢出

Alpine iLX-507 安全漏洞

Alpine iLX-507是美国Alpine公司的一个多媒体接收器。 Alpine iLX-507存在安全漏洞，该漏洞源于解析vCard数据时缺少长度验证，可能导致栈缓冲区溢出和远程代码执行。

N/A

N/A