Security Advisory

CVE-2019-14745

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-08-07 14:58:18

Last updated 2024-08-05 00:26:39

Assigner mitre

State PUBLISHED

Description

In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, its possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables.

← Browse all CVEs View on cve.org ↗