PT-2018-5002 · Unknown · Hopper Disassembler

Published 2018-06-04 · Updated 2022-12-14 · CVE-2016-8390

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hopper Disassembler version 3.11.20

Description An exploitable out of bounds write issue exists in the parsing of ELF Section Headers. A specially crafted ELF file can cause attacker-controlled pointer arithmetic, resulting in a partially controlled out of bounds write. An attacker can craft an ELF file with specific section headers to trigger this issue.

Recommendations For Hopper Disassembler version 3.11.20, consider avoiding the use of ELF files from untrusted sources until a patch is available. As a temporary workaround, restrict the parsing of ELF Section Headers to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2016-8390

Affected Products

Hopper Disassembler

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-8390 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8390 · Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2016-0222 · Note
• http://securityfocus.com/bid/93801 · Note
• https://t.me/cvenotify/39790 · Telegram Post