PT-2018-18653 · Delta · Pmsoft

Ghirmay Desta · Publicado 2018-04-30 · Atualizado 2020-09-29 · CVE-2018-8839

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Delta PMSoft versions 2.10 and prior

Description The issue allows a .ppm file to introduce a value larger than is readable by PMSoft's fixed-length stack buffer, causing the buffer to be overwritten. This may allow arbitrary code execution or cause the application to crash.

Recommendations For Delta PMSoft versions 2.10 and prior, update to at least PMSoft v2.11 or the latest available version.

Correção

Stack Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-121

CWE-787

Identificadores relacionados

CVE-2018-8839

Produtos afetados

Pmsoft

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-8839 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-18-116-01 · Nota
• http://securityfocus.com/bid/104013 · Nota
• https://osv.dev/vulnerability/CVE-2018-8839 · Aviso do Fabricante