CVE-2017-9282

2017-09-2000:00:00

CWE-190

microfocus

www.cve.org

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.4%

JSON

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.

CNA Affected

[
  {
    "product": "Micro Focus VisiBroker",
    "vendor": "Micro Focus",
    "versions": [
      {
        "status": "affected",
        "version": "VisiBroker 8.5 prior to SP4 HF3"
      }
    ]
  }
]

References

community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes