CVE-2023-40857

Name of the Vulnerable Software and Affected Versions VirusTotal yara version 4.3.2

Description The issue allows a remote attacker to execute arbitrary code via the yr execute cod function in the exe.c component. This is a Buffer Overflow vulnerability.

Recommendations For VirusTotal yara version 4.3.2, as a temporary workaround, consider disabling the yr execute cod function until a patch is available. Restrict access to the exe.c component to minimize the risk of exploitation.