PT-2019-7823 · Gmer · Gmer

Published 2019-10-29 · Updated 2019-11-01 · CVE-2016-4289

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GMER version 2.1.19357

Description A stack-based buffer overflow issue exists in the method that receives data from the SysTreeView32 control. This can be triggered by a specially crafted long path, leading to code execution when the path exceeds 99 characters.

Recommendations For GMER version 2.1.19357, avoid using paths longer than 99 characters to minimize the risk of exploitation. As a temporary workaround, consider restricting the input length for paths in the SysTreeView32 control until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2016-4289

Affected Products

Gmer

References · 3

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0127 · Exploit
• https://osv.dev/vulnerability/CVE-2016-4289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4289 · Security Note