Mineta's Space

Analysis/1-day 검색 결과

해당 글 2건

CVE-2018-1160 [Netatalk]

CVE-2018-1160 Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c. This is due to lack of bounds checking on attacker controlled data. A remote unauthenticated attacker can leverage this vulnerability to achieve arbitrary code execution. # Environment Netatalk 3.0 - 3.1.11 # Analysis Netatalk는 AFP (Apple Filing Protocol) 의 구현체이다. Apple 개발자 사이트나 레퍼런스 문서에서 AFP가 어떻게 동작하..

Analysis/1-day 2020. 10. 21. 21:08

CVE-2020-6383 [V8]

CVE-2020-6383 Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. # Environment branch 73f88b5f69077ef33169361f884f31872a6d56ac https://chromium.googlesource.com/v8/v8/+/73f88b5f69077ef33169361f884f31872a6d56ac # Bug Report https://bugs.chromium.org/p/chromium/issues/detail?id=1051017 # Patch Commi..

Analysis/1-day 2020. 9. 11. 18:49