PT-2017-4336 · Intel+1 · Opencv+1

Blendin · Published 2017-09-27 · Updated 2021-11-30 · CVE-2017-1000450

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenCV versions 3.3 and earlier

Description: The issue is related to an integer overflow in the utils.cpp component of the OpenCV library, specifically in the FillUniColor and FillUniGray functions. These functions do not check the input length, which can lead to integer overflow. If the image is from a remote source, this could result in remote code execution or denial of service.

Recommendations: For OpenCV versions 3.3 and earlier, consider updating to a newer version that includes a fix for this issue. As a temporary workaround, restrict the use of the FillUniColor and FillUniGray functions in opencv/modules/imgcodecs/src/utils.cpp to minimize the risk of exploitation. Avoid processing images from remote sources until the issue is resolved.

Exploit

Fix

RCE

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2024-07599

CVE-2017-1000450

DLA-1235-1

DLA-1438-1

DLA-2799-1

GHSA-M43C-649M-PM48

OPENSUSE-SU-2018_1438-1

Affected Products

Opencv

Suse

References · 80

• 🔥 https://github.com/opencv/opencv/issues/9723 · Exploit
• 🔥 https://github.com/xiaoqx/pocs/blob/master/opencv.md · Exploit
• 🔥 https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor · Exploit
• https://bdu.fstec.ru/vul/2024-07609 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2017-1000450 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000450 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07601 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12598 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15939 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5269 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12605 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12863 · Security Note
• https://bdu.fstec.ru/vul/2024-07606 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000450 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17760 · Security Note