PT-2012-4361
CVE-2012-2915
·
تاريخ النشر
2012-05-21
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Lattice Semiconductor PAC-Designer version 6.2.1344
Description
A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a long string in a
Value tag in a SymbolicSchematicData definition tag in PAC Design (.pac) files.Recommendations
For version 6.2.1344, consider avoiding the use of long strings in the
Value tag until a patch is available. As a temporary workaround, restrict the processing of PAC Design files from untrusted sources to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾