AOH :: HP Unsorted Q :: C07-1516.HTM

QuickCam linux device driver allows arbitrary code execution



QuickCam linux device driver allows arbitrary code execution
QuickCam linux device driver allows arbitrary code execution



Synopsis:  QuickCam linux device driver arbitrary code execution
Product:   QuickCam
Version:   <=1.0.9



Issue/Details:
=======

A critical security vulnerability has been found in QuickCam 
initialization function (qcamvc_video_init) of the protytype:

static void qcamvc_video_init(struct qcamvc *qcamvc)

The memory corruption conditions might lead to arbitrary code
execution.



Affected Versions
================
OpenSER <= 1.0.9

Solution
========
Proper boundary checking.


Exploitation
===========
Exploitation might be performed by the use of specially 
crafted QuickCam object.





The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.