CVE-2019-17664: High severity ghidra vulnerability
NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try to execute the cmd.exe program from this working directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17664?
CVE-2019-17664 is classified as a medium severity vulnerability related to untrusted search paths.
How do I fix CVE-2019-17664?
To fix CVE-2019-17664, ensure that you do not run Ghidra from an untrusted path and update to a later version if available.
What software versions are affected by CVE-2019-17664?
CVE-2019-17664 affects NSA Ghidra versions up to and including 9.0.4.
What type of vulnerability is CVE-2019-17664?
CVE-2019-17664 is a path traversal vulnerability that affects the execution of the Python interpreter within Ghidra.
Can CVE-2019-17664 lead to arbitrary code execution?
Yes, exploiting CVE-2019-17664 could potentially allow an attacker to execute arbitrary code by manipulating the working directory.