CVE-2016-8715 An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code...
HighCVSS 7.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iceni argus | = 6.6.05 | No fix listed |
| iceni argus | = 6.6.05 (Sep 22 2016) NK Linux x64 | No fix listed |
References
- 96470 broken-link third-party-advisory vdb-entry
- www.talosintelligence.com technical-description third-party-advisory