CVE:CVE-2022-23803
CNNVD:CNNVD-202202-1353
KiCad Eda是KiCad社区的一个跨平台和开源电子设计自动化套件。
KiCad EDA 存在缓冲区错误漏洞，该漏洞源于KiCad EDA 6.0.1和master commit de006fc010的Gerber Viewer Gerber和excellon ReadXYCoord协调解析功能中存在一个基于堆栈的缓冲区溢出漏洞。攻击者可利用该漏洞用一个特别制作的gerber或excellon文件可以导致代码的执行。
solution:Upgrade kicad eda to a higher version than 6.0.1,and avoid the version 6.0.1; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0