Multi-stack buffer overflow vulnerability in Toshiba ConfigFree 'cf7' File

Release date:
Updated on:

Affected Systems:
Toshiba ConfigFree 8.0.38
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55644
Cve id: CVE-2012-4980

Toshba ConfigFree is a network management software developed by Toshiba. It was originally designed for the wireless network base station search software developed by toshba notebook computers.

Toshiba ConfigFree 8.0.38 and other versions have multiple stack buffer overflow vulnerabilities. Attackers can exploit these vulnerabilities to execute arbitrary code in affected applications.

<* Source: Joseph Sheridan
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Toshba
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.toshiba.com/