Описание
PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
Ссылки
- ExploitIssue TrackingThird Party Advisory
- ExploitIssue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:picoc_project:picoc:2.1:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00891
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
github
больше 4 лет назад
PicoC 2.1 has a heap-based buffer overflow in StringStrcpy in cstdlib/string.c when called from ExpressionParseFunctionCall in expression.c.
CVSS3: 7.8
altlinux
почти 8 лет назад
ALT-PU-2018-2855: package `picoc` update to version 2.1.9-alt1
EPSS
Процентиль: 60%
0.00891
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787