8 matches found
EUVD-2018-1807
Malware in sbrugna...
NASA Pyblock Radar data parsing library code execution vulnerability
NASA Pyblock is a Python module for estimating partial beam blocking using polarized radar data.Radar data parsing library is one of the radar data parsing libraries. A security vulnerability exists in the Radar data parsing library in NASA Pyblock versions 1.0 through 1.3. A remote attacker can...
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000046
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...
CVE-2018-1000046
NASA Pyblock radar data parsing library (Python) versions 1.0–1.3 contain a CWE-502 code execution vulnerability. The issue arises in the Radar data parsing library and can be exploited by a victim opening a specially crafted radar data file, enabling remote code execution. The vulnerability is r...
PT-2018-9233
Name of the Vulnerable Software and Affected Versions: NASA Pyblock versions v1.0 through v1.3 Description: The issue is related to a CWE-502 vulnerability in the Radar data parsing library, which can result in remote code execution. This can be exploited via a victim opening a specially crafted...
CVE-2018-1000046: Deserialization of Untrusted Data
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.4...