PT-2017-4219 · Intel+1 · Opencv+1

Xiaoqx

·

Publicado

2017-08-04

·

Atualizado

2021-11-30

·

CVE-2017-12604

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3
Description The issue is related to an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For OpenCV versions through 3.3, consider disabling the FillUniColor function in utils.cpp as a temporary workaround until a patch is available. Restrict access to the cv::imread function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

BDU:2022-05952
CVE-2017-12604
DLA-1117-1
DLA-1438-1
DLA-2799-1
GHSA-C7GP-2PCH-QH2V
OPENSUSE-SU-2018_1385-1

Produtos afetados

Opencv
Suse