CVEvulnerability
CVE-2017-2155
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-04-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier, 5.1.2.13 and earlier, and 6.0.3.09 and earlier allows remote attackers to execute arbitrary code via specially crafted webpage.
Affected configurations
• i.con corporation hoozin viewer (<= 4.1.5.15)
• i.con corporation hoozin viewer (<= 5.1.2.13)
• i.con corporation hoozin viewer (<= 6.0.3.09)
• i.con corporation hoozin viewer 2
• i.con corporation hoozin viewer 3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://jvn.jp/en/jp/JVN93931029/index.html Third Party Advisory, VDB Entry
- http://www.icon-co.jp/news/20170420/index.html Patch, Vendor Advisory
- http://jvn.jp/en/jp/JVN93931029/index.html Third Party Advisory, VDB Entry
- http://www.icon-co.jp/news/20170420/index.html Patch, Vendor Advisory