PT-2018-6761 · Adobe+5 · Exempi+5

Publicado

2018-02-27

·

Atualizado

2019-08-30

·

CVE-2017-18234

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Exempi versions prior to 2.4.3
Description: The issue allows remote attackers to cause a denial of service or possibly have other impact via a .pdf file containing JPEG data. This is related to files such as ReconcileTIFF.cpp, TIFF MemoryReader.cpp, and TIFF Support.hpp in the XMPFiles/source/FormatSupport directory.
Recommendations: For versions prior to 2.4.3, update to version 2.4.3 or later to resolve the issue. As a temporary workaround, consider restricting the processing of .pdf files containing JPEG data until a patch is available.

Exploit

Correção

DoS

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2018-1294
CESA-2019_2048
CVE-2017-18234
DLA-1310-1
MGASA-2018-0239
RHSA-2019:2048
RHSA-2019_2048
SUSE-SU-2018:2067-1
SUSE-SU-2018:3389-1
SUSE-SU-2018_2067-1
USN-3668-1

Produtos afetados

Alt Linux
Centos
Exempi
Red Hat
Suse
Ubuntu