Secunia

A vulnerability has been reported in Firefly Media Server, which can be exploited by malicious people to cause a DoS or to potentially compromise a vulnerable system.

The vulnerability is caused due to a calculation error within the "ws_getpostvars()" function in src/webserver.c. This can be exploited to cause a heap-based buffer overflow via a POST request containing a negative "Content-Length" value.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions prior to 0.2.4.2.

Solution
Update to version 0.2.4.2.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Nico Golde, Debian security team.

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=593465&group_id=98211

Deep Links
Links available in Customer Area