GNU FriBidi up to 1.0.7 lib/fribidi-bidi.c fribidi_get_par_embedding_levels_ex buffer overflow

Summaryinfo

A vulnerability identified as critical has been detected in GNU FriBidi up to 1.0.7. Affected by this vulnerability is the function fribidi_get_par_embedding_levels_ex in the library lib/fribidi-bidi.c. Performing a manipulation results in buffer overflow. This vulnerability is reported as CVE-2019-18397. The attack requires a local approach. No exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, was found in GNU FriBidi up to 1.0.7. This affects the function fribidi_get_par_embedding_levels_ex in the library lib/fribidi-bidi.c. The manipulation with an unknown input leads to a buffer overflow vulnerability. CWE is classifying the issue as CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A buffer overflow in the fribidi_get_par_embedding_levels_ex() function in lib/fribidi-bidi.c of GNU FriBidi through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text content to a user, when this content is then rendered by an application that uses FriBidi for text layout calculations. Examples include any GNOME or GTK+ based application that uses Pango for text layout, as this internally uses FriBidi for bidirectional text layout. For example, the attacker can construct a crafted text file to be opened in GEdit, or a crafted IRC message to be viewed in HexChat.

The weakness was disclosed 11/13/2019 (Website). The advisory is shared at bugs.debian.org. This vulnerability is uniquely identified as CVE-2019-18397 since 10/24/2019. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• GNU

Name

• FriBidi

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.0.3
• 1.0.4
• 1.0.5
• 1.0.6
• 1.0.7

License

• open-source

Website

• Vendor: https://www.gnu.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion