PT-2019-15244 · Nsa · Nsa Ghidra

Dalvarezperez · Published 2019-10-16 · Updated 2019-10-21 · CVE-2019-17664

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NSA Ghidra versions prior to 9.0.5

Description The issue arises when NSA Ghidra is executed from a specific path, causing the Java process working directory to be set to that path. Upon launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra attempts to execute the cmd.exe program from this working directory, potentially using an untrusted search path.

Recommendations For NSA Ghidra versions prior to 9.0.5, consider updating to version 9.0.5 or later to resolve the issue. As a temporary workaround, avoid launching Ghidra from untrusted paths to minimize the risk of exploitation. Restrict access to the Python interpreter option in Ghidra until the issue is resolved.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2019-17664

Affected Products

Nsa Ghidra

References · 3

• https://osv.dev/vulnerability/CVE-2019-17664 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17664 · Security Note
• https://github.com/NationalSecurityAgency/ghidra/issues/107 · Note