PT-2023-6731 · Unknown+1 · Open Babel+1
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Open Babel versions 3.1.1 and prior
Description
The issue is related to out-of-bounds write vulnerabilities in the translationVectors parsing functionality of Open Babel, affecting multiple supported file formats, including the Gaussian file format. This can be exploited by a remote attacker using a specially crafted malformed file, potentially leading to arbitrary code execution.
Recommendations
For Open Babel version 3.1.1, consider disabling the translationVectors functionality until a patch is available.
Restrict access to files that could trigger this vulnerability to minimize the risk of exploitation.
Avoid using the Gaussian file format in Open Babel until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Open Babel