Kaspersky Embedded Systems Security CVE-2017-12823 Buffer Overflow Vulnerability

Bugtraq ID:	102141
Class:	Boundary Condition Error
CVE:	CVE-2017-12823
Remote:	Yes
Local:	No
Published:	Oct 09 2017 12:00AM
Updated:	Dec 19 2017 10:01PM
Credit:	Embedi.
Vulnerable:	Kaspersky Embedded Systems Security 2.0.0.385 Kaspersky Embedded Systems Security 1.2.0.300
Not Vulnerable:

Kaspersky Embedded Systems Security CVE-2017-12823 Buffer Overflow Vulnerability

Kaspersky Embedded Systems Security is prone to a buffer-overflow vulnerability.

Attackers can execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

The following versions are vulnerable:

Kaspersky Embedded Systems Security 1.2.0.300 and 2.0.0.385

Kaspersky Embedded Systems Security CVE-2017-12823 Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Kaspersky Embedded Systems Security CVE-2017-12823 Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Kaspersky Embedded Systems Security CVE-2017-12823 Buffer Overflow Vulnerability

References:

• Kaspersky Homepage (Kaspersky)
  
• Advisory issued on 9th October, 2017 (Kaspersky)