Buffer overflow in Juniper Odyssey Access Client

CVE-2009-4643

Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICE_CMD_UNINSTALL command to the NeoterisSetupService named pipe.

Vulnerability class: Buffer Overflow

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

Affected products

Juniper Odyssey_access_client — versions 4.72.11421.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
cve@mitre.org (x_refsource_MISC)