Advanced Core Operating System (ACOS) HTTP Requests URI Processing Buffer Overflow Vulnerability
Description
Quantum Leap has reported a vulnerability in Advanced Core Operating System (ACOS), which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to an error when handling URIs within HTTP requests, which can be exploited to cause a buffer overflow by sending a specially crafted HTTP request containing an overly long URI.
Successful exploitation may allow execution of arbitrary code.
The vulnerability is reported in versions prior to 2.7.1-P1_55.
Vulnerable Products
Vulnerable OS: Advanced Core Operating System (ACOS) 2.xVulnerable Software:
