PT-2017-19006 · Efs · Efs Software Easy Chat Server

Publicado 2017-06-12 · Atualizado 2021-03-26 · CVE-2017-9544

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EFS Software Easy Chat Server versions 2.0 to 3.1

Description The issue is a remote stack-based buffer overflow in the register.ghp component. It can be triggered by sending an overly long username string to the "registresult.htm" endpoint for user registration, potentially allowing an attacker to execute arbitrary code.

Recommendations For EFS Software Easy Chat Server versions 2.0 to 3.1, consider restricting access to the "registresult.htm" endpoint until a fix is available, and limit the length of the username string to prevent buffer overflow exploitation.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2017-9544

Produtos afetados

Efs Software Easy Chat Server

Referências · 3

• 🔥 https://exploit-db.com/exploits/42155 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9544 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9544 · Aviso do Fabricante