CVE-2017-9282 in VisiBroker

Résumé

par MITRE

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 29/05/2017
• Divulgation: 21/09/2017
• Modérer: accepté
• Entrée: VDB-106995
• CPE: prêt
• CWE: CWE-190 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.01169
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-9282
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-9282
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-9282/