PT-2018-17689 · Design Science · Mathtype

Publicado 2018-02-28 · Atualizado 2021-05-27 · CVE-2018-6639

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Design Science MathType version 6.9c

Description An out-of-bounds write issue, allowing Remote Code Execution, was found. The issue involves a size used by memmove being read from the input file.

Recommendations For Design Science MathType version 6.9c, update to version 6.9d to resolve the issue.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-6639

Produtos afetados

Mathtype

Referências · 4

• 🔥 https://drive.google.com/open?id=175_n6KhbOUlu9l0ySw-8QYk0oQbAaoZV · Exploit
• http://dessci.com/en/dl · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6639 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6639 · Aviso do Fabricante