high7.8
CVE-2016-8388
An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus.
Impact
An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iceni | Argus | Version 6.6.04 |