A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.
References
Link | Resource |
---|---|
https://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharing | Third Party Advisory |
https://github.com/tildearrow/furnace/issues/325 | Exploit Issue Tracking Patch Third Party Advisory |
https://vuldb.com/?id.196371 | Permissions Required Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: VulDB
Published: 2022-04-03T12:10:11
Updated: 2022-04-03T12:10:11
Reserved: 2022-04-03T00:00:00
Link: CVE-2022-1211
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-04-03T12:15:09.133
Modified: 2022-04-12T17:39:52.347
Link: CVE-2022-1211
JSON object: View
Redhat Information
No data.