Lucene search
PRIOn knowledge basePRION:CVE-2017-2775HistoryMar 31, 2017 - 6:59 p.m.
Memory corruption
2017-03-3118:59:00
PRIOn knowledge base
www.prio-n.com
4
0.037 Low
EPSS
Percentile
91.8%
An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabVIEW before 2015 SP1 f7 Patch and 2016 before f2 Patch. A specially crafted VI file can cause a user controlled value to be used as a loop terminator resulting in internal heap corruption. An attacker controlled VI file can be used to trigger this vulnerability, exploitation could lead to remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| labview | eq | 16.0.0.49152 |
Related
talos
talos
National Instruments LabVIEW LvVarientUnflatten Code Execution Vulnerability
2017-03-22 00:00:00
cve
cve
CVE-2017-2775
2017-03-31 18:59:00
nvd
nvd
CVE-2017-2775
2017-03-31 18:59:00
nessus
nessus
checkpoint_advisories
checkpoint_advisories
NI LabVIEW Memory Corruption (CVE-2017-2775)
2021-03-30 00:00:00
seebug
seebug
cvelist
cvelist
CVE-2017-2775
2017-03-31 18:00:00
threatpost
threatpost
No Fix Planned For LabVIEW Bug, Says National Instruments
2017-09-01 10:00:07