Buffer Overflow in Ledger-CLI Tag Parsing Functionality

CVE-2017-2807

What is CVE-2017-2807?

A buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI version 3.1.1. An attacker can exploit this flaw by crafting a malicious journal file that triggers an integer underflow, leading to unauthorized code execution. This poses a significant risk, as it could allow an attacker to execute arbitrary code on the affected system.

References