6.9
Moyenne
CVE-2019-25485 R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows…
Description
R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| R | 3.4.4 | Pas de correctif indiqué |
Références
- ExploitDB-47122 www.exploit-db.com
- VulnCheck Advisory: R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass www.vulncheck.com
Chronologie
- Publiée
- Dernière modification