PT-2019-15244 · Nsa · Nsa Ghidra

Dalvarezperez · Publicado 2019-10-16 · Atualizado 2019-10-21 · CVE-2019-17664

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NSA Ghidra versions prior to 9.0.5

Description The issue arises when NSA Ghidra is executed from a specific path, causing the Java process working directory to be set to that path. Upon launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra attempts to execute the cmd.exe program from this working directory, potentially using an untrusted search path.

Recommendations For NSA Ghidra versions prior to 9.0.5, consider updating to version 9.0.5 or later to resolve the issue. As a temporary workaround, avoid launching Ghidra from untrusted paths to minimize the risk of exploitation. Restrict access to the Python interpreter option in Ghidra until the issue is resolved.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2019-17664

Produtos afetados

Nsa Ghidra

Referências · 3

• https://github.com/NationalSecurityAgency/ghidra/issues/107 · Nota
• https://osv.dev/vulnerability/CVE-2019-17664 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17664 · Nota de Segurança