PT-2019-5102 · File+7 · Cdf+7
Publicado
2019-10-21
·
Atualizado
2024-06-15
·
CVE-2019-18218
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
file versions through 5.37
Description
The issue is related to a heap-based buffer overflow error in the
cdf read property info function, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. The vulnerability is caused by the function not restricting the number of CDF VECTOR elements, allowing a 4-byte out-of-bounds write.Recommendations
For versions through 5.37, consider disabling the
cdf read property info function in the cdf.c file as a temporary workaround until a patch is available. Restrict access to the cdf.c file to minimize the risk of exploitation. Avoid using the CDF VECTOR elements in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Centos
Red Hat
Rocky Linux
Suse
Ubuntu
Cdf