PT-2018-2753 · Dr.Web · Dr.Web Enterprise Security Suite

Publicado

2018-12-20

·

Atualizado

2018-12-20

CVSS v2.0

3.3

Baixa

VetorAV:A/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite (affected versions not specified)
Description The issue exists due to insufficient input validation in a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web agent. Exploitation of this issue may allow an attacker to cause a denial of service of the named pipe communication channel with user applications by sending specially crafted requests.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-01729

Produtos afetados

Dr.Web Enterprise Security Suite