PT-2021-7822 · Xmill · Xmill

Carl Hurd · Published 2021-08-10 · Updated 2024-08-03 · CVE-2021-21812

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xmill version 0.7

Description A stack-based buffer overflow issue exists in the command-line-parsing HandleFileArg functionality. The filepattern argument, which is under user control, is passed to strcpy without length checks, leading to a stack-buffer overflow. This can be triggered by providing malicious input. The vulnerability is related to an error in memory boundary handling when processing XML files, which could allow an attacker to execute arbitrary code.

Recommendations For Xmill version 0.7, as a temporary workaround, consider disabling the HandleFileArg function until a patch is available. Restrict access to the command-line-parsing functionality to minimize the risk of exploitation. Avoid using user-provided input for the filepattern argument in the affected functionality until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2023-03276

CVE-2021-21812

Affected Products

Xmill

References · 9

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2021-1280 · Exploit
• https://osv.dev/vulnerability/CVE-2021-21812 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03276 · Security Note
• https://safe-surf.ru/upload/VULN/VULN-20210813.1.pdf · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-21812 · Security Note
• https://se.com/ww/en/download/document/SEVD-2021-222-02 · Note
• https://t.me/cibsecurity/40759 · Telegram Post
• https://t.me/cvenotify/88695 · Telegram Post
• https://t.me/cvenotify/28899 · Telegram Post