CVE Database
/

CVE-2015-5309

Back to search

CVE-2015-5309

Published: Dec 7, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an ECH (erase characters) escape sequence with a large parameter value, which triggers a buffer underflow.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-3409
vendor-advisory
x_refsource_DEBIAN
FEDORA-2015-3d17682c15
vendor-advisory
x_refsource_FEDORA
FEDORA-2015-5ad4a1f151
vendor-advisory
x_refsource_FEDORA
1034308
vdb-entry
x_refsource_SECTRACK
GLSA-201606-01
vendor-advisory
x_refsource_GENTOO
openSUSE-SU-2015:2023
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now