PT-2023-6865 · Unknown+1 · V-Server Lite+1

·

CVE-2023-47586

·

Publicado

2023-11-10

·

Atualizado

2023-11-21

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions V-Server versions 4.0.18.0 and earlier V-Server Lite versions 4.0.18.0 and earlier
Description The issue is related to heap-based buffer overflow vulnerabilities. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted file. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
Recommendations For V-Server versions 4.0.18.0 and earlier, avoid opening specially crafted VPR files until a patch is available. For V-Server Lite versions 4.0.18.0 and earlier, avoid opening specially crafted VPR files until a patch is available. As a temporary workaround, consider restricting access to VPR files to minimize the risk of exploitation.

Correção

Heap Based Buffer Overflow

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-07879
CVE-2023-47586

Produtos afetados

V-Server
V-Server Lite