PT-2020-8670
CVE-2018-20343
·
Published
2020-03-02
·
Updated
2020-03-04
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Ken Silverman Build Engine version 1
Description:
The issue concerns multiple buffer overflow vulnerabilities. An attacker could craft a special map file to execute arbitrary code when the map file is loaded.
Recommendations:
For Ken Silverman Build Engine version 1, consider avoiding the use of map files from untrusted sources until a fix is available. As a temporary workaround, restrict the loading of map files to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾