vendor:
R
by:
Hashim Jawad
7.5
CVSS
HIGH
Local Buffer Overflow
119
CWE
Product Name: R
Affected Version From: R v3.4.4
Affected Version To: R v3.4.4
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Microsoft Windows 7 Enterprise - SP1 (x86)
2018
R v3.4.4 – Local Buffer Overflow (DEP Bypass)
This exploit targets R v3.4.4 and allows for a local buffer overflow, bypassing DEP (Data Execution Prevention). The exploit author, Hashim Jawad, discovered this vulnerability and provided a proof of concept.
Mitigation:
To mitigate this vulnerability, it is recommended to update R to a non-vulnerable version or apply any patches provided by the vendor.