PT-2019-13577 · Mcpp+1 · Mcpp+1

Frederic Cambus · Published 2019-07-26 · Updated 2025-01-13 · CVE-2019-14274

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MCPP version 2.7.2

Description The issue is a heap-based buffer overflow in the do msg() function located in support.c. This overflow can potentially lead to arbitrary code execution, allowing an attacker to execute malicious code on the affected system.

Recommendations For MCPP version 2.7.2, as a temporary workaround, consider disabling the do msg() function until a patch is available. However, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

AZL-34973

AZL-6679

CVE-2019-14274

OPENSUSE-SU-2020:0382-1

OPENSUSE-SU-2020:0391-1

OPENSUSE-SU-2020_0382-1

OPENSUSE-SU-2024:11044-1

ROSA-SA-2025-2565

Affected Products

Mcpp

Suse

References · 23

• 🔥 https://sourceforge.net/p/mcpp/bugs/13 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:11044-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0391-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14274 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-14274 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00038.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-6679 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0382-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-14274 · Vendor Advisory
• https://security.gentoo.org/glsa/202208-04 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14274 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00032.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14274 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-14274 · Vendor Advisory