CVE-2020-28596 - log back

CVE-2020-28596 edited at 11 Feb 2021 08:05:18
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Arbitrary code execution
Description
+ A stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer before version 2.3.0. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
References
+ https://talosintelligence.com/vulnerability_reports/TALOS-2020-1220
+ https://github.com/prusa3d/PrusaSlicer/commit/ba9a9b4e7ac8863f52923a90a9290a8ab0660e8
Notes
CVE-2020-28596 created at 11 Feb 2021 08:01:25