PT-2023-6724 · Unknown+1 · Open Babel+1
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Open Babel versions 3.1.1 and master commit 530dbfa3
Description
The issue is related to out-of-bounds write vulnerabilities in the translationVectors parsing functionality. This can be triggered by a specially-crafted malformed file, potentially leading to arbitrary code execution. An attacker can exploit this by providing a malicious file. The vulnerability affects the MOPAC Cartesian file format.
Recommendations
For Open Babel version 3.1.1, consider disabling the translationVectors parsing functionality until a patch is available.
For Open Babel master commit 530dbfa3, restrict the use of the affected MOPAC Cartesian file format to minimize the risk of exploitation.
Avoid using malicious or untrusted files with the affected software until the issue is resolved.
Exploit
Correção
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Open Babel