CVE-2017-2788

Pharos PopUp Printer Client 9.0 is affected in its psnotifyd component. The DecodeBinary path processes attacker-controlled data from network packets, leading to a heap-based buffer overflow. In a sequence, data from the packet is XOR-deobfuscated via a loop and written to attacker-controlled mem...

CVE-2017-2786

CVE-2017-2786 affects Pharos PopUp Printer Client 9.0, specifically the psnotifyd component. The vulnerability stems from DecodeString/CheckPacketEnd handling of attacker-controlled packet data, where an end_of_str pointer is not validated, leading to an out-of-bounds read and a denial of service...

CVE-2017-2785

Summary: CVE-2017-2785 involves a heap-based buffer overflow in the Pharos PopUp Printer Client 9.0 (psnotifyd). The DecodeString logic processes attacker-controlled packet data, enabling a crafted input to overflow a heap buffer and potentially execute code remotely. The vulnerable component is ...

CVE-2017-2787

Pharos PopUp Printer Client 9.0 (psnotifyd) is affected by CVE-2017-2787 due to a heap-based buffer overflow in BlobData handling. The TALOS/seebug details reveal a vulnerability in psnotifyd where packet data length is decremented and used in a memcpy without adequate validation, enabling an out...