EUVD-2017-9089

Malware in sbrugna...

Handy Password Buffer Overflow Vulnerability

Handy Password is a set of password management software based on the Winsows platform. A buffer overflow vulnerability exists in Handy Password version 4.9.3. The vulnerability can be exploited by a remote attacker to execute arbitrary code via the long 'Title name' field in the 'mail box' data...

Buffer overflow

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action...

CVE-2017-17946

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action...

CVE-2017-17946

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action...

CVE-2017-17946

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action...

CVE-2017-17946

Handy Password 4.9.3 is affected by a buffer overflow vulnerability that can be triggered by a long 'Title name' in mail box data during 'Open from mail box', potentially allowing remote code execution. The CVE entry CVE-2017-17946 is described with a high/critical impact (NVD CVSSv3 base score 9...

PT-2018-6596

Name of the Vulnerable Software and Affected Versions: Handy Password version 4.9.3 Description: A buffer overflow issue allows remote attackers to execute arbitrary code via a long Title name field in mail box data that is mishandled in an Open from mail box action. Recommendations: For Handy...

CVE-2017-17946: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action...