Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4
CVSS Information
N/A
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
YARA 输入验证错误漏洞
Vulnerability Description
YARA是一套用于帮助软件研究人员识别和分类恶意软件样本的工具。 YARA v4.0.3及之前版本中存在输入验证错误漏洞，该漏洞源于libyara/modules/macho/macho.c中的整数溢出和缓冲区溢出读取，允许攻击者通过恶意的Mach-O文件导致拒绝服务或信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A