PT-2018-10183 · Unknown+1 · Ttembed

Sgayou · Publicado 2018-08-02 · Atualizado 2019-10-09 · CVE-2018-10921

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue is related to the processing of ttembed input files, where certain files may cause an integer overflow. This overflow could potentially lead to corruption of the input file due to inadequate checking of return codes from fgetc and fputc function calls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

RCE

Enumeração de Fraquezas

CWE-190

CWE-20

Identificadores relacionados

CVE-2018-10921

Produtos afetados

Ttembed

Referências · 4

• 🔥 https://github.com/hisdeedsaredust/ttembed/issues/3 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10921 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10921 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-10921 · Aviso do Fabricante