PT-2014-4006 · Embarcadero · Embarcadero Delphi Xe6+1

Joaquìn Rodrìguez Varela

+1

·

CVE-2014-0993

·

Publicado

2014-09-15

·

Atualizado

2014-09-16

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Embarcadero Delphi XE6 version 20.0.15596.9843 C++ Builder XE6 version 20.0.15596.9843
Description The issue is related to a buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation. This allows remote attackers to execute arbitrary code via a crafted BMP file.
Recommendations For Embarcadero Delphi XE6 version 20.0.15596.9843, consider avoiding the use of the Vcl.Graphics.TPicture.Bitmap implementation until a patch is available. For C++ Builder XE6 version 20.0.15596.9843, consider avoiding the use of the Vcl.Graphics.TPicture.Bitmap implementation until a patch is available.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-0993

Produtos afetados

C++ Builder Xe6
Embarcadero Delphi Xe6