CVE-2017-7310 A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Sea...
HighCVSS 7.8
EPSS 53.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flexense diskboss | = 7.8.16 | No fix listed |
| flexense disksorter | = 9.5.12 | No fix listed |
| flexense syncbreeze | = 9.5.16 | No fix listed |
References
- www.diskboss.com
- www.diskpulse.com
- www.disksavvy.com
- www.disksorter.com
- www.dupscout.com
- 97237 third-party-advisory vdb-entry
- www.syncbreeze.com
- www.vxsearch.com
- 41771 exploit third-party-advisory vdb-entry
- 41772 exploit third-party-advisory vdb-entry
- 41773 exploit third-party-advisory vdb-entry
- 43875 exploit
- 44157 exploit