CVE-2008-5176

Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

5.72% chance of exploitation in the next 30 days, 93th percentile

Published

2008-11-20

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://aluigi.org/poc/wincomalpd.zip

References

• CVE Record
• NVD entry

Related

• CVE-2008-5175
• CVE-2008-5177
• CVE-2008-5174
• CVE-2008-5178
• CVE-2008-5171
• CVE-2008-5180