CVE:CVE-2016-1243
CNNVD:CNNVD-201610-022
unADF是一套磁盘文件转储工具。
unADF中的‘extractTree’函数存在基于栈的缓冲区溢出漏洞。远程攻击者可借助长的路径名利用该漏洞执行任意代码。
solution:Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade unadf_project unadf to a higher version than 1.0,and avoid the version 1.0