CVE-2014-3912 Information

Description

Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value.

Reference

http://www.securityfocus.com/bid/67823 http://www.zerodayinitiative.com/advisories/ZDI-14-169