PT-2019-13767 · None+1 · Brandy+1

Frederic Cambus · Published 2019-08-05 · Updated 2020-08-24 · CVE-2019-14665

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Brandy version 1.20.1

Description The issue is related to a heap-based buffer overflow in the define array function within the variables.c file. This overflow can be triggered by crafted BASIC source code.

Recommendations For Brandy version 1.20.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-14665

Affected Products

Brandy

Debian

References · 8

• 🔥 https://sourceforge.net/p/brandy/bugs/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-14665 · Security Note
• https://osv.dev/vulnerability/CVE-2019-14665 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14665 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-14665 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-14665 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-14665 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-14665 · Vendor Advisory