Iceni Argus ipNameAdd Code Execution Vulnerability(CVE-2016-8335)

Summary An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can send/provide malicious pdf file to trigger this vulnerability...

CVE-2016-8335

An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 Sep 7 2012 NK - Linux x64 and Version 6.6.04 Nov 14 2014 NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. A...

CVE-2016-8335

CVE-2016-8335 is an exploitable stack-based buffer overflow in Iceni Argus IPNameAdd(), triggered by unvalidated source strings copied via strcpy before length checks. Affects Iceni Argus 6.6.04 (Linux x64) and 6.6.04 (Windows x64). The vulnerability stems from a 255-byte destination buffer (dest...