PT-2017-15531
CVE-2017-2779
·
تاريخ النشر
2017-09-05
·
تاريخ التحديث
2022-04-19
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
LabVIEW versions 2014 through 2017
Description
A memory corruption issue exists in the RSRC segment parsing functionality. This can be triggered by a specially crafted Virtual Instrument (VI) file, causing an attacker-controlled looping condition that results in an arbitrary null write. An attacker-controlled VI file can potentially lead to code execution.
Recommendations
For LabVIEW 2014, update to a version that includes the fix for this issue.
For LabVIEW 2015, update to a version that includes the fix for this issue.
For LabVIEW 2016, update to a version that includes the fix for this issue.
For LabVIEW 2017, update to a version that includes the fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾