PT-2020-19949
CVE-2020-8109
·
تاريخ النشر
2020-10-01
·
تاريخ التحديث
2020-10-14
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Bitdefender Engines versions prior to 7.84892
Description
A vulnerability has been discovered in the ace.xmd parser due to a lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer, leading to denial-of-service.
Recommendations
For Bitdefender Engines versions prior to 7.84892, update to a version later than 7.84892 to resolve the issue. As a temporary workaround, consider restricting the input to the ace.xmd parser to prevent malicious data from being processed.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾