CVE-2016-4289

MEDIUM

GMER 2.1.19357 - Stack-Based Buffer Overflow via Long Path in SysTreeView32 Control

Title source: llm
STIX 2.1

Description

A stack based buffer overflow vulnerability exists in the method receiving data from SysTreeView32 control of the GMER 2.1.19357 application. A specially created long path can lead to a buffer overflow on the stack resulting in code execution. An attacker needs to create path longer than 99 characters to trigger this vulnerability.

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
http://www.talosintelligence.com/reports/TALOS-2016-0127/

Scores

CVSS v3 5.5
EPSS 0.0058
EPSS Percentile 44.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (1)
gmer/gmer 2.1.19357
Published Oct 29, 2019
Tracked Since Feb 18, 2026