CVE-2017-9282 in VisiBroker

Riassunto

di MITRE

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 29/05/2017
• Divulgazione: 21/09/2017
• Moderazione: accettato
• Voce: VDB-106995
• CPE: pronto
• CWE: CWE-190 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.01169
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-9282
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-9282
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-9282/