PT-2019-19780

CVE-2019-9656

Publicado

2019-03-11

Atualizado

2024-08-23

Descrição por

CVSS 3.1

8.8

Alta

MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibOFX version 0.9.14

Description An issue was discovered in LibOFX. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx sgml.cpp, as demonstrated by ofxdump.

Recommendations For LibOFX version 0.9.14, consider avoiding the use of the OFXApplication::startElement function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Cool-Tomato

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-476: NULL Pointer Dereference

Identificadores relacionados

CVE-2019-9656