Luigi Auriemma has reported a vulnerability in PicoPhone, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the logging functionality. This can be exploited to cause a buffer overflow by sending an overly long packet to the service.

Version 1.63 and prior are reportedly affected.

Solution
Update to version 1.64:
Further details available in Customer Area

Provided and/or discovered by
Luigi Auriemma

Original Advisory
http://aluigi.altervista.org/adv/picobof-adv.txt

Deep Links
Links available in Customer Area