PT-2018-2642 · Gnu+2 · Gnu Libextractor+2
Publicado
2018-12-24
·
Atualizado
2020-11-23
·
CVE-2018-20431
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Libextractor versions prior to 1.9
Description
The issue is related to a NULL Pointer Dereference in the
process metadata() function, located in the ole2 extractor.c file. This can be exploited by a remote attacker using a specially crafted OLE file, potentially leading to a denial of service or memory content disclosure.Recommendations
For GNU Libextractor versions prior to 1.9, consider updating to version 1.9 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
ole2 extractor.c plugin to minimize the risk of exploitation.Exploit
Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu Libextractor
Ubuntu