PT-2018-19373 · Pms · Pms
CVE-2018-25224
·
Publicado
2018-01-01
·
Atualizado
2026-03-28
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PMS version 0.42
Description
PMS 0.42 contains a stack-based buffer overflow that allows local, unauthenticated attackers to execute arbitrary code by providing malicious values in the configuration file. Attackers can create configuration files with oversized input that overflows the stack buffer and executes shell commands via return-oriented programming gadgets.
Recommendations
Update to a newer version of PMS.
Exploit
Correção
Missing Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pms