CVE-2017-6952

HIGH

capstone < 3.0.4 - Integer Overflow in cs_winkernel_malloc

Title source: llm
STIX 2.1

Description

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97323

Scores

CVSS v3 8.8
EPSS 0.0124
EPSS Percentile 65.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (2)
capstone-engine/capstone < 3.0.4
pypi/capstone 0 - 3.0.5rc2PyPI
Published Mar 16, 2017
Tracked Since Feb 18, 2026