Some vulnerabilities have been discovered in WinRemotePC, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

1) An input validation error in the WinRemotePC Server service (WRPCServer.exe) can be exploited to cause a heap-based buffer overflow via an overly long, specially crafted packet sent to default port 4321/TCP.

Successful exploitation may allow execution of arbitrary code.

2) An input validation error in the WinRemotePC Server service can be exploited to cause the service to consume large amounts of CPU resources via a specially crafted packet sent to default port 4321/TCP.

3) An input validation error in the WinRemotePC Server service can be exploited to cause the service to consume large amounts of memory resources via a specially crafted packet sent to default port 4321/TCP.

The vulnerabilities are confirmed in WinRemotePC Lite 2008 and also reported in WinRemotePC Full 2008. Other versions may also be affected.

Solution
Restrict network access to the affected service.

Provided and/or discovered by
Shinnok

Additional research provided by Secunia Research.

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/6077

Deep Links
Links available in Customer Area