CVEvulnerability
CVE-2017-14627
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-09-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
Affected configurations
• cyberlink labelprint 2.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/ Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/42777/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/45985/ www.exploit-db.com
- https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/ Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/42777/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/45985/ www.exploit-db.com