PT-2019-7823 · Gmer · Gmer

Publicado 2019-10-29 · Atualizado 2019-11-01 · CVE-2016-4289

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GMER version 2.1.19357

Description A stack-based buffer overflow issue exists in the method that receives data from the SysTreeView32 control. This can be triggered by a specially crafted long path, leading to code execution when the path exceeds 99 characters.

Recommendations For GMER version 2.1.19357, avoid using paths longer than 99 characters to minimize the risk of exploitation. As a temporary workaround, consider restricting the input length for paths in the SysTreeView32 control until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2016-4289

Produtos afetados

Gmer

Referências · 3

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0127 · Exploit
• https://osv.dev/vulnerability/CVE-2016-4289 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4289 · Nota de Segurança