CVE-2016-8715

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability.

• CWE-119

• http://www.securityfocus.com/bid/96470Broken Link, Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0228/Technical Description, Third Party Advisory
• http://www.securityfocus.com/bid/96470Broken Link, Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0228/Technical Description, Third Party Advisory

Published

Feb 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8709A remote out of bound write / memory corruption vulnerabilit…7.8
• CVE-2016-8710An exploitable heap write out of bounds vulnerability exists…7.8
• CVE-2016-8711A potential remote code execution vulnerability exists in th…7.8
• CVE-2016-8712An exploitable nonce reuse vulnerability exists in the Web A…8.1
• CVE-2016-8713A remote out of bound write / memory corruption vulnerabilit…7.8
• CVE-2016-8714An exploitable buffer overflow vulnerability exists in the L…8.8
• CVE-2016-8716An exploitable Cleartext Transmission of Password vulnerabil…7.5
• CVE-2016-8717An exploitable Use of Hard-coded Credentials vulnerability e…9.8
• CVE-2016-8718An exploitable Cross-Site Request Forgery vulnerability exis…8.8
• CVE-2016-8719An exploitable reflected Cross-Site Scripting vulnerability …6.1
• CVE-2016-8720An exploitable HTTP Header Injection vulnerability exists in…4.3
• CVE-2016-8721An exploitable OS Command Injection vulnerability exists in …9.1