PT-2018-10783
CVE-2018-11725
·
Publicado
2018-06-19
·
Atualizado
2018-08-08
Descrição por
CVSS 3.1
6.5
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Libmobi version 0.3
Description
The issue allows remote attackers to cause an information disclosure via a crafted mobi file, specifically through a heap-based buffer over-read in the
mobi parse index entry function.Recommendations
For Libmobi version 0.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾