Digital Canal Wind Analysis CVE-2017-7910 Stack Buffer Overflow Vulnerability
BID:98976
Info
Digital Canal Wind Analysis CVE-2017-7910 Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 98976 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-7910 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2017 12:00AM |
| Updated: | Jun 07 2017 12:00AM |
| Credit: | Peter Cheng |
| Vulnerable: |
Digital Canal Wind Analysis 9.1 |
| Not Vulnerable: | |
Discussion
Digital Canal Wind Analysis CVE-2017-7910 Stack Buffer Overflow Vulnerability
Digital Canal Wind Analysis is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.
Versions prior to Digital Canal Wind Analysis 9.1 and prior are vulnerable.
Digital Canal Wind Analysis is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.
Attackers can exploit this issue to cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.
Versions prior to Digital Canal Wind Analysis 9.1 and prior are vulnerable.