exploitDog

CVE-2017-9544

Опубликовано: 12 июн. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Высокий

Описание

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

Ссылки

https://www.exploit-db.com/exploits/42155/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42155/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:echatserver:easy_chat_server:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 3.1 (включая)

EPSS

Процентиль: 99%

0.79593

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-v53x-rh5j-prv2

CVSS3: 9.8

github

больше 3 лет назад

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

EPSS

Процентиль: 99%

0.79593

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787