CVE-2017-2777 An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. A...
HighCVSS 7.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can cause an integer overflow resulting in heap overflow. An attacker can send file to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iceni argus | = 6.6.05 | No fix listed |
| iceni argus | = 6.6.05 (Sep 22 2016) NK | No fix listed |
References
- www.talosintelligence.com exploit third-party-advisory