PT-2018-3469 · Openexr+4 · Openexr+4
Tan Jie
·
Publicado
2018-10-17
·
Atualizado
2024-06-15
·
CVE-2018-18444
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
OpenEXR version 2.3.0
Description:
The issue is related to an out-of-bounds write in the exrmultiview function of the OpenEXR library. This could potentially allow a remote attacker to cause a denial of service or execute arbitrary code. The problem is specifically identified in the makeMultiView.cpp file.
Recommendations:
For OpenEXR version 2.3.0, consider applying a patch or fix to address the out-of-bounds write issue in the exrmultiview function to prevent potential exploitation. As a temporary workaround, consider restricting access to the affected function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Openexr
Suse
Ubuntu