CVE-2007-2434

Description

Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed DNS query.

Affected products

• aventail / aventail_connect4.1.2.13

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/1793
• MISChttp://www.securityfocus.com/bid/23717
• MAILING_LISThttp://marc.info/?l=full-disclosure&m=117795069208458&w=2
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/33972