PT-2018-1094 · Sam2P · Sam2P
Fantasy7082
·
Publicado
2018-02-23
·
Atualizado
2020-12-17
·
CVE-2018-7551
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Sam2p version 0.49.4
Description
The issue is related to the use of memory after it has been freed in the MiniPS::delete0 function of the Sam2p image conversion utility. This can be exploited by a remote attacker to cause a denial of service. A crafted input can lead to a segmentation fault, resulting in a denial of service or possibly other unspecified impacts.
Recommendations
For Sam2p version 0.49.4, as a temporary workaround, consider disabling the
MiniPS::delete0 function until a patch is available. Restrict access to the vulnerable minips.cpp module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sam2P