Description (CNA)
Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in the TERR security mechanism allows attackers to bypass sandbox restrictions, enabling the execution of untrusted code without appropriate controls.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Spotfire / Spotfire Enterprise Runtime for R | affected 6 through 1.4 |
| Spotfire / Spotfire Statistics Services | affected 14 through 0.6; affected 14.1.0; affected 14.2.0; affected 14.3.0; affected 14.4.0; affected 14.4.1 |
| Spotfire / Spotfire Analyst | affected 14 through 0.5; affected 14.1.0; affected 14.2.0; affected 14.3.0; affected 14.4.0; affected 14.4.1 |
| Spotfire / Deployment Kit used in Spotfire Server | affected 14 through 0.6; affected 14.1.0; affected 14.2.0; affected 14.3.0; affected 14.4.0; affected 14.4.1 |
| Spotfire / Spotfire Desktop | affected 14 through 4.1 |
| Spotfire / Spotfire for AWS Marketplace | unknown 14 through 4.1 |
| Spotfire / Spotfire Enterprise Runtime for R - Server Edition | affected 1 through 17.6; affected 1.18.0; affected 1.19.0; affected 1.20.0; affected 1.21.0; affected 1.21.1 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.