PT-2018-5002 · Unknown · Hopper Disassembler

CVE-2016-8390 · Publicado 2018-06-04 · Atualizado 2022-12-14

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hopper Disassembler version 3.11.20

Description An exploitable out of bounds write issue exists in the parsing of ELF Section Headers. A specially crafted ELF file can cause attacker-controlled pointer arithmetic, resulting in a partially controlled out of bounds write. An attacker can craft an ELF file with specific section headers to trigger this issue.

Recommendations For Hopper Disassembler version 3.11.20, consider avoiding the use of ELF files from untrusted sources until a patch is available. As a temporary workaround, restrict the parsing of ELF Section Headers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2016-8390

Produtos afetados

Hopper Disassembler

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-8390 · Nota de Segurança
• https://talosintelligence.com/vulnerability_reports/TALOS-2016-0222 · Nota
• http://securityfocus.com/bid/93801 · Nota
• https://t.me/cvenotify/39790 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2016-8390 · Aviso do Fabricante