Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters involving (1) certain command line parameters in tools/afconvert.cpp and (2) arguments to the get_parameter function in aimage/ident.cpp. NOTE: it is unknown if the get_parameter vector (2) is ever called.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AFFLIB多个Shell元字符注入漏洞
Vulnerability Description
AFFLIB是用于操作高级取证格式(AFF)文件的开源函数库。 AFFLIB的一些popen()调用未经验证或转义便使用了用户提供的命令行参数，本地攻击者可能利用这些漏洞提升权限。 具体漏洞如下： * 解压调用Shell命令注入 * 文件：tools/afconvert.cpp 行数：245 & 255 popen()调用未经验证或转义便使用了一个命令行参数，如果这个命令或这个函数接受了不可信任来源的参数，就可能导致执行任意命令。240-257行说明了这个问题： /* Check to see if it
CVSS Information
N/A
Vulnerability Type
N/A