PT-2019-13688 · Tortoisesvn+1 · Tortoisesvn+1

Pingfanzettake · Published 2019-08-15 · Updated 2020-08-24 · CVE-2019-14422

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TortoiseSVN version 1.12.1

Description An issue in the Tsvncmd: URI handler allows for a customized diff operation on Excel workbooks, potentially executing arbitrary code. The tsvncmd:command:diff?path:[file1]?path2:[file2] URI executes a customized diff on [file1] and [file2] based on the file extension. For .xls files, it executes the diff-xls.js script using wscript, opening the files without macro security warnings. An attacker can exploit this by placing a macro virus in a network drive and forcing the victim to open the workbooks, executing the macro inside.

Recommendations For TortoiseSVN version 1.12.1, consider disabling the tsvncmd: URI handler or restricting its use to minimize the risk of exploitation until a patch is available. Avoid using the diff-xls.js script for analyzing .xls files until the issue is resolved. As a temporary workaround, restrict access to network drives that may contain malicious files to prevent the execution of macro viruses.

Exploit

Fix

Related Identifiers

CVE-2019-14422

Affected Products

Office Excel

Tortoisesvn

References · 6

• 🔥 https://vulnerability-lab.com/get_content.php?id=2188 · Exploit
• 🔥 https://exploit-db.com/exploits/47252 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Aug/7 · Exploit
• https://osv.dev/vulnerability/CVE-2019-14422 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14422 · Security Note
• https://t.me/cybersecuritytechnologies/445 · Telegram Post