Skip to content
OpenAdvisories
Unscored CVE-2019-17664 EUVD-2019-7969GHSA-j2f2-77f8-cgrm

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working direct…

Published Oct 16, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try to execute the cmd.exe program from this working directory.

References