high7.6
CVE-2017-7908
A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior.
Impact
A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gigasoft | Proessentials | through 5 |
| Ge | Ge Communicator | through 3.15 |