6.9
Medium
CVE-2019-25485 R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows…
Description
R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| R | 3.4.4 | No fix stated |
References
- ExploitDB-47122 www.exploit-db.com
- VulnCheck Advisory: R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass www.vulncheck.com
Timeline
- Published
- Last modified