CVE-2018-7730: Buffer Overflow
An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp, leading to a heap-based buffer over-read in the PSDMetaHandler::CacheFileData() function.
Other sources
Exempi through version 2.4.4 is vulnerable to a integer wraparound that can lead to a heap-based buffer overflow in PSDMetaHandler::CacheFileData() method in XMPFiles/source/FormatSupport/PSIRFileWriter.cpp. An attacker could exploit this to cause a denial of service via crafted xls file.
Upstream Bug Report: https://bugs.freedesktop.org/showbug.cgi?id=105204
Upstream Patch: https://cgit.freedesktop.org/exempi/commit/?id=6cbd34025e5fd3ba47b29b602096e456507ce83b
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/exempito a version that resolves this vulnerability.Fixed in 2.4.5 - Upgrade
Upgrade
debian/exempito a version that resolves this vulnerability.Fixed in 2.5.2-1Fixed in 2.5.2-1+deb11u1Fixed in 2.6.3-1Fixed in 2.6.6-2 - Upgrade
Upgrade
exempito a version that resolves this vulnerability.Fixed in 2.4.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch 6cbd34025e5fd3ba47b29b602096e456507ce83b - Compensating control
If Exempi is used to process untrusted .xls/XLS-like files, restrict or sandbox that processing to reduce exposure to denial of service from crafted files until the upstream fix is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7730?
CVE-2018-7730 is classified as a moderate severity vulnerability due to its potential for heap-based buffer over-read.
How do I fix CVE-2018-7730?
To mitigate CVE-2018-7730, upgrade Exempi to version 2.4.5 or later.
Which versions of Exempi are affected by CVE-2018-7730?
Exempi versions up to and including 2.4.4 are affected by CVE-2018-7730.
What types of systems are vulnerable to CVE-2018-7730?
CVE-2018-7730 affects systems running Exempi versions 2.4.4 or earlier, including certain distributions of Debian and Ubuntu.
What is the impact of exploiting CVE-2018-7730?
Exploiting CVE-2018-7730 can lead to potential information disclosure via heap-based buffer over-read.