A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore commit 58d455617f99705f0ffd8a27616abdf77bdc1bdc allows attackers to cause an information leak via a crafted structure from an untrusted operating system.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
Link | Tags |
---|---|
http://electronics.com | broken link |
http://shieldstore.com | broken link |
https://github.com/cocoppang/ShieldStore/blob/master/Enclave/Enclave.cpp | patch |
https://github.com/cocoppang/ShieldStore/issues/19 | issue tracking exploit |