HTTP: CoreHTTP URI Parsing Overflow

This signature detects attempts to exploit a known vulnerability in CoreHTTP. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the targeted application. Failed exploit attempts could trigger a denial of service condition.

Extended Description

Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.

Affected Products

Frank_yaul corehttp

References

BugTraq: 25120 67777

CVE: CVE-2014-3913

URL: http://www.zerodayinitiative.com/advisories/zdi-14-160/ http://www.ericom.com/security-erm-2014-610.asp

Short Name

HTTP:OVERFLOW:COREHTTP-URI

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: CoreHTTP URI Parsing Overflow

Extended Description

Affected Products

References

Found a potential security threat?