Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v5fw-q4pf-8p2h

Опубликовано: 21 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file format

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file format

EPSS

Процентиль: 38%
0.0017
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 2 лет назад

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file format

CVSS3: 9.8
nvd
больше 2 лет назад

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability affects the MSI file format

CVSS3: 9.8
debian
больше 2 лет назад

Multiple out-of-bounds write vulnerabilities exist in the translationV ...

CVSS3: 9.8
fstec
больше 3 лет назад

Уязвимость функции TranslationVectors программного обеспечения преобразования форматов файлов химических веществ Open Babel, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 38%
0.0017
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-119
CWE-787