What is the CVSS score of CVE-2017-8367?

CVE-2017-8367 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2017-8367?

Yes, a public proof-of-concept exploit is available for CVE-2017-8367. Prioritise patching immediately. EPSS: 0.1%.

Easy Avi Divx Xvid To Dvd Burner CVE-2017-8367

HIGH

Buffer Overflow (CWE-119)

2017-04-30 cve@mitre.org

Buffer Overflow Denial Of Service Easy Avi Divx Xvid To Dvd Burner Easy Avi Divx Converter Easy Cd Dvd Copy Easy Dvd Creator Easy Mov Converter Easy Mpeg Avi Divx Wmv Rm To Dvd Easy Mpeg To Dvd Burner Easy Rm Rmvb To Dvd Burner Easy Video To 3Gp Converter Easy Video To Ipod Mp4 Psp 3Gp Converter Easy Video To Ipod Converter Easy Video To Mp4 Converter Easy Video To Psp Converter Easy Wmv Asf Asx To Dvd Burner Mp3 Avi Mpeg Wmv Rm To Audio Cd Burner Mp3 Wav Ogg Wma Ac3 To Cd Burner Mp3 Wav To Cd Burner My Video Converter

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Apr 30, 2017 - 19:59 cve.org

HIGH 7.8

DescriptionCVE.org

Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/MP4/PSP/3GP Converter allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long username.

AnalysisAI

Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/MP4/PSP/3GP Converter allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long username. Affected products include: Ether Software Easy Avi\/Divx\/Xvid To Dvd Burner, Ether Software Easy Avi Divx Converter, Ether Software Easy Cd Dvd Copy, Ether Software Easy Dvd Creator, Ether Software Easy Mov Converter.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.