Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability

Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the DataOffset field within SMB responses. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the kernel. Was ZDI-CAN-28345.

N/A

内存缓冲区边界内操作的限制不恰当

Sonos Era 300 缓冲区错误漏洞

Sonos Era 300是美国Sonos公司的一个搭载杜比全景声 (Dolby Atmos) 的空间音频扬声器。 Sonos Era 300存在缓冲区错误漏洞，该漏洞源于对SMB响应中DataOffset字段验证不足，可能导致远程代码执行。

N/A

N/A