CVE-2014-3158

Publication date

2014-11-15 21:00:00

Family

Chrome

State

PUBLISHED

Description

Integer overflow in the getword function in options.c in pppd in Pauls PPP Package (ppp) before 2.4.7 allows attackers to "access privileged options" via a long word in an options file, which triggers a heap-based buffer overflow that "[corrupts] security-relevant variables."