tildearrow Furnace dev73 FUR to VGM Converter 内存损坏

在tildearrow Furnace dev73中已发现了分类为致命的漏洞。 此漏洞会影响未知部件的组件FUR to VGM Converter。 手动调试的不合法输入可导致 内存损坏。 漏洞的CWE定义是 CWE-121。 此漏洞的脆弱性 2022-04-03公示人身份325、所发布。 阅读公告的网址是github.com。 该漏洞唯一标识为CVE-2022-1211， 攻击可以远程发起， 无技术细节可用。 此外还有一个漏洞可利用。 该漏洞利用已公开，可能会被利用。 当前漏洞利用的价值为美元大约是$0-$5k 。 它被宣布为proof-of-concept。 该漏洞利用的共享下载地址为：drive.google.com。 我们估计的零日攻击价值约为$0-$5k。 错误修复程序下载地址为github.com， 建议采用一个补丁来修正此问题。 该漏洞被披露后，此前未曾发表过可能的缓解措施。

字段2022-04-05 18時31分2022-04-05 18時39分2022-04-10 17時09分
vendortildearrowtildearrowtildearrow
nameFurnaceFurnaceFurnace
versiondev73dev73dev73
componentFUR to VGM ConverterFUR to VGM ConverterFUR to VGM Converter
cwe121 (内存损坏)121 (内存损坏)121 (内存损坏)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_ePPP
cvss3_vuldb_rcCCC
urlhttps://github.com/tildearrow/furnace/issues/325https://github.com/tildearrow/furnace/issues/325https://github.com/tildearrow/furnace/issues/325
availability111
publicity111
urlhttps://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharinghttps://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharinghttps://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharing
cveCVE-2022-1211CVE-2022-1211CVE-2022-1211
responsibleVulDBVulDBVulDB
date1648936800 (2022-04-03)1648936800 (2022-04-03)1648936800 (2022-04-03)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcCCC
cvss2_vuldb_rlNDNDOF
cvss3_vuldb_rlXXO
cvss2_vuldb_basescore7.57.57.5
cvss2_vuldb_tempscore6.86.85.9
cvss3_vuldb_basescore6.36.36.3
cvss3_vuldb_tempscore6.06.05.7
cvss3_meta_basescore6.36.36.3
cvss3_meta_tempscore6.06.16.0
price_0day$0-$5k$0-$5k$0-$5k
identifier325325325
cve_assigned1648936800 (2022-04-03)1648936800 (2022-04-03)1648936800 (2022-04-03)
cve_nvd_summaryA vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prNN
cvss3_cna_uiRR
cvss3_cna_sUU
cvss3_cna_cLL
cvss3_cna_iLL
cvss3_cna_aLL
cve_cnaVulDBVulDB
cvss3_cna_basescore6.36.3
name补丁
patch_urlhttps://github.com/tildearrow/furnace/commit/3a7a132f0210c047de1825b33d68e3542145b0a1

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!