PT-2018-14752 · Vt · Vt-Designer

Ariele Caltabiano + 1 · Published 2018-11-26 · Updated 2018-12-27 · CVE-2018-18983

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VT-Designer version 2.1.7.31

Description The issue arises when the program reads the contents of a file into another heap-based buffer, potentially causing the program to crash or allowing remote code execution. This is related to a heap-based buffer overflow during file parsing.

Recommendations For VT-Designer version 2.1.7.31, consider restricting access to file parsing functionality until a patch is available. As a temporary workaround, avoid using the file parsing feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-18983

ZDI-18-1360

Affected Products

Vt-Designer

References · 5

• https://osv.dev/vulnerability/CVE-2018-18983 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-18-1360 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-18983 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-333-01 · Note
• http://securityfocus.com/bid/106071 · Note