PT-2017-4139 · Ilmbase+4 · Openexr+4
Brandon Perry
·
Publicado
2017-05-21
·
Atualizado
2021-03-05
·
CVE-2017-9113
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenEXR version 2.2.0
Description
The issue is related to insufficient input validation in the
bufferedReadPixels function, which could lead to an invalid write of size 1, causing the application to crash or potentially execute arbitrary code. This could allow a remote attacker to cause a denial of service.Recommendations
For OpenEXR version 2.2.0, consider applying input validation to the
bufferedReadPixels function to prevent invalid writes. As a temporary workaround, restrict the use of the bufferedReadPixels function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Openexr
Suse
Ubuntu