CVE-2019-14274

Name of the Vulnerable Software and Affected Versions MCPP version 2.7.2

Description The issue is a heap-based buffer overflow in the do msg() function located in support.c. This overflow can potentially lead to arbitrary code execution, allowing an attacker to execute malicious code on the affected system.

Recommendations For MCPP version 2.7.2, as a temporary workaround, consider disabling the do msg() function until a patch is available. However, at the moment, there is no information about a newer version that contains a fix for this issue.