PT-2018-3969 · Libraw+3 · Libraw+3
Alextutubalin
·
Publicado
2018-06-08
·
Atualizado
2024-06-15
·
CVE-2018-5815
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
LibRaw versions prior to 0.18.12
Description
The issue is related to an integer overflow error within the
parse qt() function in the internal/dcraw common.cpp component of the LibRaw image processing library. This error can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file, potentially leading to a denial of service. The vulnerability can be exploited by a remote attacker.Recommendations
For versions prior to 0.18.12, update to version 0.18.12 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of the
parse qt() function until a patch is available.Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Libraw
Suse
Ubuntu