Heap-based buffer overflow in the TermProxy (WLTermProxyService.exe) service in Wavelink ConnectPro allows remote attackers to execute arbitrary code via a large HTTP header.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4060
Reference (s):
- BID:74858
- URL: http://www.securityfocus.com/bid/74858
- http://www.zerodayinitiative.com/advisories/ZDI-15-246/