CVE-2016-10722

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1720%

EPSS Percentile10.70th

Published2018年5月2日

Last Modified2024年11月21日

Vulnerability Description

partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the FAT superblock, related to the mark_reserved_sectors function. An attacker may be able to execute arbitrary code in the context of the user running the affected application.

Affected Platforms (CPE)

📦

Partclone Project

Partclone

< 0.2.88

References & Advisories

🔗 https://david.gnedt.at/blog/2016/11/14/advisory-partclone-fat-bitmap-heap-overflow/

🔗 https://github.com/Thomas-Tsai/partclone/issues/71