March 9, 2017 Leave a Comment
Avatar
Security

Vulnerability Spotlight: R – PDF LoadEncoding Code Execution Vulnerability

1 min read

Vulnerability Discovered by Cory Duplantis of Cisco Talos

Overview

Talos is disclosing TALOS-2016-0227 / CVE-2016-8714 which is a buffer overflow vulnerability in the LoadEncoding functionality of the R programming language version 3.3.0. The R programming language is commonly used in statistical computing and is supported by the R Foundation for Statistical Computing. R is praised for having a large variety of statistical and graphical features. The vulnerability is specifically related to the creation of a PDF document.

Read More >>



Authors

Avatar

Talos Group

Talos Security Intelligence & Research Group