description: UniSign 2.0.4.0 and earlier version contains a stack-based buffer overflow vulnerability which can overwrite the stack with arbitrary data, due to a buffer overflow in a library. That leads remote attacker to execute arbitrary code via crafted https packets.
problem types: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
affected:
{
product: UniSign
vendor: CROSSCERT
versions:
status: affected, version: 2.0.4.0
}