Skip to content

CVE-2017-6953 Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted input...

HighCVSS 7.8 EPSS 1.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted input to SmartDiag.exe or SymDiag.exe.

Affected products

ProductAffected versionsFixed in
gemalto smartdiag diagnosis tool <= 2.5 No fix listed

References

  • 41972 exploit third-party-advisory vdb-entry