CVE-2023-50245
memory overflow vulnerability in OpenEXR-viewer
Impact
Just open this exr file through openexr-viewer. ( poc send by email ) This is windbg log file. [ POC 2 ] (8660.7e44): Access violation - code c0000005 (!!! second chance !!!) openexr_viewer+0x27be4: 00007ff7`13ff7be4 c744880c0000803f mov dword ptr [rax+rcx*4+0Ch],3F800000h ds:0000020a`3ac8000c=???????? Attempt to write the value 1.0 to the memory address 0x20A3AC8000C [ POC 1 ] (1404.9264): Access violation - code c0000005 (first chance) First chance exceptions are reported before any exception handling. This exception may be expected and handled. openexr_viewer+0x27be4: 00007ff7`13ff7be4 c744880c0000803f mov dword ptr [rax+rcx*4+0Ch],3F800000h ds:0000029c`b371600c=???????? Attempt to write the value 1.0 to the memory address 0x29CB371600C Credits Team : ZeroPointer 이동하 ( Lee Dong Ha of ZeroPointer Lab ) 정지민 ( Jeong Jimin of ZeroPointer Lab ) 박우진 ( Park Woojin of ZeroPointer Lab ) 전우진 ( Jeon Woojin of ZeroPointer Lab )
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| actions | afichet/openexr-viewer | < 0.6.1 | 0.6.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Afichet | Openexr Viewer | before 0.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/afichet/openexr-viewer/commit/d0a7e85dfeb519951fb8a8d70f73f30d41cdd3d9
- https://github.com/afichet/openexr-viewer/security/advisories/GHSA-99jg-r3f4-rpxj
- https://github.com/advisories/GHSA-99jg-r3f4-rpxj
- https://nvd.nist.gov/vuln/detail/CVE-2023-50245