PT-2014-4006

CVE-2014-0993

·

Publicado

2014-09-15

·

Atualizado

2014-09-16

Descrição por

CVSS 2.0
6.8
Média
MétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Embarcadero Delphi XE6 version 20.0.15596.9843 C++ Builder XE6 version 20.0.15596.9843
Description The issue is related to a buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation. This allows remote attackers to execute arbitrary code via a crafted BMP file.
Recommendations For Embarcadero Delphi XE6 version 20.0.15596.9843, consider avoiding the use of the Vcl.Graphics.TPicture.Bitmap implementation until a patch is available. For C++ Builder XE6 version 20.0.15596.9843, consider avoiding the use of the Vcl.Graphics.TPicture.Bitmap implementation until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Identificadores relacionados
CVE-2014-0993
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com