PT-2017-13592 · Sam2P · Sam2P

Ghost · Publicado 2017-09-21 · Atualizado 2020-12-17 · CVE-2017-14630

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sam2p version 0.49.3

Description The issue is related to an integer overflow in the pcxLoadImage24 function, located in the in pcx.cpp file. This overflow results in an invalid write operation.

Recommendations For sam2p version 0.49.3, consider avoiding the use of the pcxLoadImage24 function until a patch is available. As a temporary workaround, restrict the processing of PCX images to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2017-14630

DLA-1127-1

MGASA-2020-0459

Produtos afetados

Sam2P

Referências · 13

• 🔥 https://github.com/pts/sam2p/issues/14 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-14630 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=27746 · Nota
• https://debian.org/lts/security/2018/dla-1463 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14630 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2020-0459 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-14630 · Aviso do Fabricante
• https://debian.org/lts/security/2018/dla-1340 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-14630 · Nota de Segurança
• https://debian.org/lts/security/2017/dla-1127 · Aviso do Fabricante
• https://debian.org/lts/security/2017/dla-1185 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-14630 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2020-0459.html · Nota de Segurança