SynopsisThe remote host is vulnerable to multiple attack vectors.
DescriptionThe installed version of the TortoiseSVN is affected by multiple heap overflow issues. Specifically, the 'libsvn_delta' library fails to perform sufficient boundary checks before processing certain svndiff streams. An attacker with commit access to a vulnerable Subversion server could exploit this vulnerability from a Subversion client to trigger a heap overflow on the server. Typically such an attack would result in a denial of service condition or arbitrary code execution. An attacker could also trigger this issue from a rogue Subversion server on a Subversion client in response to a checkout or update request.
SolutionUpgrade to TortoiseSVN 1.5.7/1.6.4 or later.