CVE-2018-7687 Client for OES Elevation of Privilege via Buffer Overflow
HighCVSS 7.8
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microfocus client | <= 2.0 | No fix listed |
| microfocus client | = 2.0-sp3 | No fix listed |
| micro focus Client for Open Enterprise Server | >= 2 SP4 (IR8a), < 2 SP4 (IR8a) | 2 SP4 (IR8a) |