PT-2023-6865 · Unknown+1 · V-Server Lite+1
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
V-Server versions 4.0.18.0 and earlier
V-Server Lite versions 4.0.18.0 and earlier
Description
The issue is related to heap-based buffer overflow vulnerabilities. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted file. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
Recommendations
For V-Server versions 4.0.18.0 and earlier, avoid opening specially crafted VPR files until a patch is available.
For V-Server Lite versions 4.0.18.0 and earlier, avoid opening specially crafted VPR files until a patch is available.
As a temporary workaround, consider restricting access to VPR files to minimize the risk of exploitation.
Correção
Heap Based Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
V-Server
V-Server Lite