Luigi Auriemma has discovered a vulnerability in PowerNet Twin Client, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a signedness error in RFSync.exe and can be exploited to cause a crash via a specially crafted request sent to TCP port 1804.

The vulnerability is confirmed in version 8.9.0. Other versions may also be affected.

Solution
No official solution is currently available.

Provided and/or discovered by
Luigi Auriemma

Original Advisory
http://aluigi.altervista.org/adv/powernet_1-adv.txt

Deep Links
Links available to Secunia VIM customers