CVE-2005-1125

Currently unrated

Key Information:

Vendor
Avaya
Status
Libsafe
Vendor
CVE Published:
2 May 2005

Badges

👾 Exploit Exists🟡 Public PoC

Summary

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

libsafe-CVE-2005-1125
Created by tagatac

References

http://www.securityfocus.com/archive/1/395999
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/13190
vdb-entryx_refsource_BID
http://www.overflow.pl/adv/libsafebypass.txt
x_refsource_MISC

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.