vendor:
R
by:
Charles Truscott
7.8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: R
Affected Version From: R 3.4.4
Affected Version To: R 3.4.4
Patch Exists: Yes
Related CWE: N/A
CPE: a:r_project:r:3.4.4
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10 x86
2020
R 3.4.4 Win10 x86 Buffer Overflow
A buffer overflow vulnerability was discovered in R 3.4.4 running on Windows 10 x86. The vulnerability was discovered by bzyo and was authored by Charles Truscott. The exploit involves pasting a file called 'boom.txt' into the 'Language for menus ...' field in the GUI Preferences. The exploit uses a combination of POP, MOV, XCHG, NEG, and PUSHAD instructions to gain control of the program.
Mitigation:
The best way to mitigate this vulnerability is to ensure that all software is up to date and patched with the latest security updates.
