CVE-2017-2816

2017-09-1318:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.

CPENameOperatorVersion
libofxeq0.9.7
libofxeq0.9.11
libofxeq0.9.10
libofxeq0.6.5
libofxeq0.9.3
libofxeq0.6.6
libofxeq0.6.3
libofxeq0.9.4
libofxeq0.9.5
libofxeq0.9.0