CVE:CVE-2019-5063
CNNVD:CNNVD-202001-048
OpenCV是一款开源的、跨平台的、轻量级计算机视觉库。
OpenCV 4.1.0版本中的‘persistence’模式存在缓冲区错误漏洞。远程攻击者可借助特制XML文件利用该漏洞在系统上执行任意代码。
solution:Upgrade opencv opencv to a higher version than 4.1.0,and avoid the version 4.1.0; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle big_data_spatial_and_graph to a higher version than 2.0,and avoid the version (,2.0); Upgrade oracle enterprise_manager_base_platform to a higher version than 13.4.0.0,and avoid the version 13.4.0.0