Description (CNA)
An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The R Project / R | affected 3.3.0; affected 3.3.2 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/96785
- http://www.debian.org/security/2017/dsa-3813
- http://www.talosintelligence.com/reports/TALOS-2016-0227/
ADP enrichment
No English description supplied.