Buffer overflow in Mochasoft Mocha W32 Lpd

CVE-2010-1687

Stack-based buffer overflow in lpd.exe in Mocha W32 LPD 1.9 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted "recieve jobs" request. NOTE: some of these details are obtained from third party information.

Vulnerability class: Buffer Overflow

EPSS: 0.051 (91.6th percentile) — read the EPSS interpretation.

Affected products

Mochasoft Mocha_w32_lpd — versions 1.9
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
cve@mitre.org (x_refsource_MISC)