PT-2018-12591 · Redgate · Redgate Smartassembly+1

Soroush Dalili · Publicado 2018-07-31 · Atualizado 2018-10-05 · CVE-2018-14581

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Redgate .NET Reflector versions prior to 10.0.7.774 Redgate SmartAssembly versions prior to 6.12.5

Description The issue allows attackers to execute code by decompiling a compiled .NET object, such as a DLL or EXE file, with a specific embedded resource file.

Recommendations For Redgate .NET Reflector versions prior to 10.0.7.774, update to version 10.0.7.774 or later. For Redgate SmartAssembly versions prior to 6.12.5, update to version 6.12.5 or later.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-14581

Produtos afetados

Redgate .Net Reflector

Redgate Smartassembly

Referências · 5

• 🔥 https://nccgroup.trust/us/our-research/technical-advisory-code-execution-by-viewing-resource-files-in-.net-reflector/?research=Technical+advisories · Exploit
• https://osv.dev/vulnerability/CVE-2018-14581 · Aviso do Fabricante
• https://documentation.red-gate.com/sa6/release-notes-and-other-versions/smartassembly-6-12-release-notes · Aviso do Fabricante
• https://documentation.red-gate.com/ref10/release-notes-and-other-versions/net-reflector-10-0-release-notes · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-14581 · Nota de Segurança