Back to Database
Status published
Critical
CVE-2008-1491
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in...
Vulnerability Description
Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1491
Credits & Attribution
No credits recorded in the NVD database.
References
- http://aluigi.altervista.org/adv/asuxdpc-adv.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41358
- https://www.exploit-db.com/exploits/5694
- http://securityreason.com/securityalert/3771
- http://www.securityfocus.com/bid/28394
- http://secunia.com/advisories/29402
- http://www.vupen.com/english/advisories/2008/0982/references
- http://www.securityfocus.com/archive/1/489966/100/0/threaded
More from asus
View All →CVE-2022-44898
The MsIo64.sys component in Asus Aura Sync through v1.07.79 does...
Unknown
0
CVE-2022-42455
ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by...
Unknown
0
CVE-2022-36439
AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers...
Unknown
0
CVE-2022-36438
AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file...
Unknown
0
CVE-2022-35899
There is an unquoted service path in ASUSTeK Aura Ready...
High
7.8
Affected Vendor
asus
View all reports →Affected Software
remote console
Vulnerable Versions:
2.0.0.19, 2.0.0.24
Timeline
Official Publish:
March 25th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.