Out-of-Bounds Write Vulnerability in Micro Focus VisiBroker Software
CVE-2017-9282

9.8CRITICAL

Key Information:

Vendor

Micro Focus

Status
Micro Focus Visibroker
Vendor
CVE Published:
20 September 2017

What is CVE-2017-9282?

An integer overflow vulnerability found in Micro Focus VisiBroker 8.5 can result in an out-of-bounds write operation within a heap-allocated memory space, potentially leading to heap corruption. This flaw can be exploited to manipulate program execution and compromise system integrity, warranting immediate attention by users of the software.

Affected Version(s)

Micro Focus VisiBroker VisiBroker 8.5 prior to SP4 HF3

References

https://community.microfocus.com/microfocus/corba/visibro...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.