PT-2018-4358

CVE-2015-2004

·

Published

2018-03-29

·

Updated

2018-04-23

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions GraceNote GNSDK SDK versions prior to SVN Changeset 1.1.7
Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function.
Recommendations For versions prior to SVN Changeset 1.1.7, update to a version that includes the fix for this issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-118: Incorrect Access of Indexable Resource (\'Range Error\')
Related identifiers
CVE-2015-2004
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com