Description
AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a crafted cookie that triggers memory corruption, aka the "Misfortune Cookie" vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://mis.fortunecook.ie/ ↗
- http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-407666.htm ↗
- http://www.securityfocus.com/bid/105173 ↗
- https://www.allegrosoft.com/allegro-software-urges-manufacturers-to-maintain-firmware-for-highest-level-of-embedded-device-security/news-press.html ↗
- http://seclists.org/fulldisclosure/2014/Dec/87 ↗
- http://www.kb.cert.org/vuls/id/561444 ↗