Lucene search
+L

99 matches found

Debian CVE
Debian CVE
•added 2017/09/25 9:00 p.m.•45 views

CVE-2017-14731

ofxprocfile in ofxpreproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an ofxdump call...

6.5CVSS7.3AI score0.01264EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/25 12:00 a.m.•6 views

CVE-2017-14731: Out-of-bounds Read

ofxprocfile in ofxpreproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an ofxdump call...

6.5CVSS7.3AI score0.01264EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/09/25 12:00 a.m.•3 views

PT-2017-13658

Name of the Vulnerable Software and Affected Versions LibOFX version 0.9.12 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This can be demonstrated by an ofxdump call. Recommendation...

6.5CVSS0.01264EPSS
SaveExploits1References24
CNVD
CNVD
•added 2017/09/14 12:00 a.m.•18 views

LibOFX Buffer Overflow Vulnerability

LibOFX is a library that allows programs to support OFX financial data bi-directional exchange command responses. A buffer overflow vulnerability exists in the label parsing feature in LibOFX version 0.9.11. An attacker can exploit this vulnerability to execute code or cause a denial of service...

8.8CVSS7.5AI score0.02393EPSS
SaveExploits1References1
NVD
NVD
•added 2017/09/13 6:29 p.m.•20 views

CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS8.8AI score0.02393EPSS
SaveExploits1References4
Prion
Prion
•added 2017/09/13 6:29 p.m.•26 views

Buffer overflow

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

6.8CVSS8.2AI score0.02393EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
•added 2017/09/13 6:29 p.m.•20 views

CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1References2
OSV
OSV
•added 2017/09/13 6:29 p.m.•8 views

DEBIAN-CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1References1
OSV
OSV
•added 2017/09/13 6:29 p.m.•23 views

CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7AI score
SaveExploits0References4
OSV
OSV
•added 2017/09/13 6:29 p.m.•21 views

UBUNTU-CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1References3
CVE
CVE
•added 2017/09/13 6:00 p.m.•86 views

CVE-2017-2816

LibOFX 0.9.11 contains an exploitable buffer overflow in the tag parsing functionality. A crafted OFX file can cause a write out of bounds on the stack, potentially enabling remote code execution or a crash. Public advisories and CVE records consistently describe this vulnerability as CVE-2017-28...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2017/09/13 6:00 p.m.•1 views

CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS0.02393EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2017/09/13 6:00 p.m.•58 views

CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS8.7AI score0.02393EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2017/09/13 6:00 p.m.•36 views

CVE-2017-2816

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1
Talos Blog
Talos Blog
•added 2017/09/13 7:24 a.m.•60 views

Vulnerability Spotlight: LibOFX Tag Parsing Code Execution Vulnerability

This vulnerability was discovered by Cory Duplantis of TalosUpdate 9/20/2017: A patch is now available to fix this issue.OverviewLibOFX is an open source implementation of OFX Open Financial Exchange an open format used by financial institutions to share financial data with clients. As an...

6.8CVSS7.2AI score0.02393EPSS
SaveExploits1
FreeBSD
FreeBSD
•added 2017/09/13 12:00 a.m.•29 views

libofx -- exploitable buffer overflow

Talos developers report: An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/09/13 12:00 a.m.•9 views

PT-2017-15554 · Libofx +1 · Libofx +1

Name of the Vulnerable Software and Affected Versions: LibOFX version 0.9.11 Description: A buffer overflow issue exists in the tag parsing functionality. This can be triggered by a specially crafted OFX file, causing a write out of bounds and resulting in a buffer overflow on the stack. An...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits4References28
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/13 12:00 a.m.•4 views

CVE-2017-2816: Improper Restriction of Operations within the Bounds of a Memory Buffer

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.3AI score0.02393EPSS
SaveExploits1References2
Talos
Talos
•added 2017/09/13 12:00 a.m.•33 views

LibOFX Tag Parsing Code Execution Vulnerability

Summary An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS7.5AI score0.02393EPSS
SaveExploits1
Rows per page
Query Builder