PT-2017-16162 · Blackberry · Blackberry Qnx Software Development Platform

CVE-2017-3893

·

Publicado

2017-11-14

·

Atualizado

2025-07-22

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions BlackBerry QNX Software Development Platform (SDP) version 6.6.0
Description The default configuration of the QNX SDP system in BlackBerry QNX Software Development Platform (SDP) does not prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks in all circumstances.
Recommendations For BlackBerry QNX Software Development Platform (SDP) version 6.6.0, consider reconfiguring the system to prevent buffer overflow attacks from modifying the GOT or PLT tables until a patch is available.

Correção

Buffer Overflow

Protection Mechanism Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-693

Identificadores relacionados

CVE-2017-3893

Produtos afetados

Blackberry Qnx Software Development Platform