Description
Stack-based buffer overflow in the Message::AddToString function in message/Message.cpp in MUSCLE before 4.40 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted message. NOTE: some of these details are obtained from third party information.
References
- 31822 vdb-entry
- https://public.msli.com/lcs/muscle/muscle/HISTORY.txt
- muscle-messageaddtostring-bo(45959) vdb-entry
- 32318 third-party-advisory
- ADV-2008-2869 vdb-entry