CVE-2017-15950

HIGH

SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-15950 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

Proofs of concept

2

Catalogued exploits

ExploitDBSyncBreeze 10.1.16 - XML Parsing Stack-based Buffer OverflowExploitDB exploitby Filipe OliveiraNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubrnnsz/CVE-2017-15950Repository PoCby rnnsz0Not analyzed4 files

42.9 KiB

GitHub
PoC details

References

3