Cygwin 'wcsxfrm/wcsxfrm_l' function buffer overflow vulnerability

Cygwin is a collection of many free software programs for running UNIX-like systems on various versions of Microsoft Windows. A buffer overflow vulnerability exists in the 'wcsxfrm/wcsxfrml' function in Cygwin versions 1.7.2 through 1.8.0. An attacker can exploit this vulnerability to cause a...

PT-2017-17787

Name of the Vulnerable Software and Affected Versions Cygwin versions 1.7.2 through 1.8.0 Description The issue is related to a buffer overflow vulnerability in the wcsxfrm and wcsxfrm l functions. This can result in a denial-of-service by crashing the process or potentially allow hijacking of th...

CVE-2017-7523: Out-of-bounds Write

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrml functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input...