Check Point Advisories

EMC AlphaStor Device Manager Buffer Overflow - High Confidence (CVE-2013-0930)

Check Point Reference:	CPAI-2013-1681
Date Published:	25 Apr 2013
Severity:	Critical
Last Updated:	Tuesday 01 January, 2013
Source:	CVE-2013-0930
Protection Provided by:
Who is Vulnerable?	EMC AlphaStor 4.0 prior to build 814
Vulnerability Description	A stack-based buffer overflow vulnerability has been reported in EMC AlphaStor Device Manager. The vulnerability is due to a lack of boundary checking when processing certain opcode messages in rrobotd.exe. Unauthenticated attackers can exploit this vulnerability to execute arbitrary code in the security context of the Device Manager process.