CVE-2017-7310

Опубликовано: 29 мар. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Высокий

Описание

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.

Ссылки

http://www.diskboss.com/news.html
http://www.diskpulse.com/news.html
http://www.disksavvy.com/news.html
http://www.disksorter.com/news.html
http://www.dupscout.com/news.html
http://www.securityfocus.com/bid/97237
Third Party Advisory
VDB Entry
http://www.syncbreeze.com/news.html
http://www.vxsearch.com/news.html
https://www.exploit-db.com/exploits/41771/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41772/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41773/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/43875/
https://www.exploit-db.com/exploits/44157/
http://www.diskboss.com/news.html
http://www.diskpulse.com/news.html
http://www.disksavvy.com/news.html
http://www.disksorter.com/news.html
http://www.dupscout.com/news.html
http://www.securityfocus.com/bid/97237
Third Party Advisory
VDB Entry
http://www.syncbreeze.com/news.html

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:flexense:diskboss:7.8.16:*:*:*:enterprise:*:*:*

cpe:2.3:a:flexense:disksorter:9.5.12:*:*:*:enterprise:*:*:*

cpe:2.3:a:flexense:syncbreeze:9.5.16:*:*:*:enterprise:*:*:*

EPSS

Процентиль: 99%

0.86559

Высокий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-4cmq-9jfx-jxmh