NetSight
high7.5

CVE-2017-7523

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service…

Impact

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.

Affected products

VendorProductAffected versions
CygwinCygwin
Versions 1.7.2, 1.7.3, 1.7.5, 1.7.6, 1.7.7, 1.7.8

Weakness classification

References