CVE-2017-9544 There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering....
CriticalCVSS 9.8
EPSS 24.1%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| echatserver easy chat server | >= 2.0, <= 3.1 | No fix listed |
References
- 42155 exploit third-party-advisory vdb-entry