Description
Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to memcpy copying the path provided by the user into a staticly sized buffer without any length checks resulting in a stack-buffer overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | AT&T | AT&T Labs Xmill 0.7 | — |
Advisories 2
- ICSA-22-223-03 Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70 CISA ICS & IT advisories · Aug 11, 2022
- SEVD-2021-222-02 AT&T Labs Compressor (XMilI) and Decompressor (XDemill) used by EcoStruxureTM Control Expert, EcoStruxureTM Process Expert and SCADAPack RemoteConnect™ for x70 Schneider Electric CPCERT · Jul 12, 2022