Integer Overflow Vulnerability in Capstone Product by Capstone
CVE-2017-6952

8.8HIGH

Key Information:

Vendor

Capstone-engine

Status
Capstone
Vendor
CVE Published:
16 March 2017

What is CVE-2017-6952?

An integer overflow vulnerability exists in the cs_winkernel_malloc function located in winkernel_mm.c, affecting Capstone versions up to 3.0.4. This flaw can enable attackers to exploit the system, leading to a denial of service due to a heap-based buffer overflow within a kernel driver when a large value is provided. The vulnerability may also result in additional unspecified impacts, emphasizing the critical need for updates and patches.

References

http://www.securityfocus.com/bid/97323
vdb-entryx_refsource_BID
https://github.com/aquynh/capstone/commit/6fe86eef621b984...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.