PT-2018-16229 · Walt Disney Animation Studios · Ptex

CVE-2018-3835 · Publicado 2018-01-29 · Atualizado 2023-02-03

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Per Face Texture mapping application known as PTEX version 2.2

Description An out of bounds write issue exists due to improper parameter checking when reading a file. The value read is not verified, potentially leading to a buffer overflow and code execution.

Recommendations For PTEX version 2.2, as a temporary workaround, consider restricting the reading of files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-3835

Produtos afetados

Ptex

Referências · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0515 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-3835 · Nota de Segurança
• https://t.me/cvenotify/43570 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2018-3835 · Aviso do Fabricante