QwikSec

Security Database

CVE

CWE

Training

CVE-2019-16941

Published: Sep 28, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call).

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/NationalSecurityAgency/ghidra/issues/1090

x_refsource_MISC

https://github.com/NationalSecurityAgency/ghidra/blob/79d8f164f8bb8b15cfb60c5d4faeb8e1c25d15ca/Ghidra/Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java#L187-L188

x_refsource_MISC

https://github.com/purpleracc00n/CVE-2019-16941

x_refsource_MISC

https://github.com/NationalSecurityAgency/ghidra/commit/a17728f8c12effa171b17a25ccfb7e7d9528c5d0

x_refsource_MISC

https://www.symantec.com/security-center/vulnerabilities/writeup/110223?om_rssid=sr-advisories

x_refsource_MISC

https://twitter.com/NSAGov/status/1178812792159248385

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.