high7.8Public exploit code
CVE-2017-14627
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)2018-12-13 · local · windows · Verified
- CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode)2017-09-23 · local · windows · Verified
Impact
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cyberlink | Labelprint | Version 2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/
- https://www.exploit-db.com/exploits/42777/
- https://www.exploit-db.com/exploits/45985/
- https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/
- https://www.exploit-db.com/exploits/42777/
- https://www.exploit-db.com/exploits/45985/