Secunia Research has discovered a vulnerability in Motion, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the “read_client()” function in webhttpd.c. This can be exploited to cause a stack-based buffer overflow by sending a specially crafted request to the HTTP control interface. Successful exploitation allows execution of arbitrary code, but requires that the Motion HTTP control interface is enabled. Versions below 3.2.10.1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/67642/secunia-readclient.txt
Source: https://packetstormsecurity.com/files/67642/secunia-readclient.txt.html