Published: 15/09/2014 Updated: 16/09/2014

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 606

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Buffer overflow in the Vcl.Graphics.TPicture.Bitmap implementation in the Visual Component Library (VCL) in Embarcadero Delphi XE6 20.0.15596.9843 and C++ Builder XE6 20.0.15596.9843 allows remote malicious users to execute arbitrary code via a crafted BMP file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
embarcadero embarcadero delphi xe6 20.0.15596.9843
embarcadero embarcadero c\\+\\+builder xe6 20.0.15596.9843

This is a workaround for CVE-2014-0993 and CVE-2014-0994 that patches on memory without the need to recompile your vulnerable software. This is not the Embarcadero official fix, this is only CORE Security workaround.

##What is Embarcadero Workaround ? This is an unofficial "patch" for "Embarcadero VCL Library Stack/Heap Overflow" (CVE-2014-0993 and CVE-2014-0994) ##Which Software versions does this workaround support? 32-bit software compiled with Delphi and C++ Builder where the "VCL library" was included, as long as the library is statically linked into the

This is a workaround for CVE-2014-0993 and CVE-2014-0994 that patches on memory without the need to recompile your vulnerable software. This is not the Embarcadero official fix, this is only CORE Security workaround.

##What is Embarcadero Workaround ? This is an unofficial "patch" for "Embarcadero VCL Library Stack/Heap Overflow" (CVE-2014-0993 and CVE-2014-0994) ##Which Software versions does this workaround support? 32-bit software compiled with Delphi and C++ Builder where the "VCL library" was included, as long as the library is statically linked into the

CWE-119 http://www.coresecurity.com/advisories/delphi-and-c-builder-vcl-library-buffer-overflow http://www.kb.cert.org/vuls/id/646748 http://support.embarcadero.com/article/44015 https://nvd.nist.gov https://github.com/SecureAuthCorp/Embarcadero-Workaround https://www.kb.cert.org/vuls/id/646748

CVE-2014-0993

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect