PT-2020-19828 · Infraware · Infraware Ml Report

Jongsub Park · Published 2020-12-16 · Updated 2020-12-18 · CVE-2020-7837

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Infraware ML Report version 2.19.312.0000

Description An issue was discovered in the ML Report Program, where a stack-based buffer overflow occurs in the function sub 41EAF0 at MLReportDeamon.exe. This happens because the function calls vsprintf without checking the length of strings in parameters given by an attacker, leading to a stack-based buffer overflow via access to a crafted web page.

Recommendations For Infraware ML Report version 2.19.312.0000, consider disabling the sub 41EAF0 function in MLReportDeamon.exe as a temporary workaround until a patch is available. Restrict access to crafted web pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2020-7837

Affected Products

Infraware Ml Report

References · 5

• https://osv.dev/vulnerability/CVE-2020-7837 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7837 · Security Note
• https://t.me/cibsecurity/20944 · Telegram Post
• https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35849 · Note
• https://t.me/cvenotify/7386 · Telegram Post