high7.8Public exploit code
CVE-2017-6953
Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gemalto SmartDiag Diagnosis Tool < 2.5 - Local Buffer Overflow (SEH)2017-05-08 · local · windows · Verified
Impact
Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of local code execution with untrusted input to SmartDiag.exe or SymDiag.exe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gemalto | Smartdiag Diagnosis Tool | through 2.5 |