CVE-2017-14627
Last modified
CVE-2017-14627 is a vulnerability of currently unknown severity. Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.. EPSS estimates a 19.19% chance of exploitation in the next 30 days.
Description
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cyberlink | Labelprint | 2.5 |
References
- https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/42777/Exploit, Third Party Advisory, VDB Entry
- https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/42777/Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-14627?
How severe is CVE-2017-14627?
How do I fix CVE-2017-14627?
Are you affected by CVE-2017-14627?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST