PT-2023-2138 · Unknown · Xiaozhuai Imageinfo
10Cksyiqiyinhangzhoutechnology
·
Publicado
2023-02-26
·
Atualizado
2024-05-17
·
CVE-2023-1190
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
xiaozhuai imageinfo versions up to 3.0.3
Description
A buffer overflow issue has been found in the imageinfo.hpp file of the xiaozhuai imageinfo library. This issue is related to the copying of a buffer without checking the size of the input data. The manipulation of this issue can lead to a buffer overflow, which requires local access to exploit. The exploit has been disclosed to the public and may be used, potentially allowing an attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For xiaozhuai imageinfo versions up to 3.0.3, consider updating to a version later than 3.0.3 to resolve the buffer overflow issue.
As a temporary workaround, consider restricting access to the imageinfo.hpp file to minimize the risk of exploitation.
Exploit
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Xiaozhuai Imageinfo