medium5.5
CVE-2017-11328
Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.
Impact
Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Virustotal | Yara | Versions 3.0.0, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 3.5.0 |