Zahir Enterprise Plus

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-17408 Oct 03, 20:29 HIGH POC THREAT Act Now

Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Zahir Enterprise Plus

NVD Exploit-DB

CVSS 3.0

7.8

EPSS

19.0%

CVE-2018-17408

EPSS 19% CVSS 7.8

HIGH POC THREAT Act Now

Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption +1

NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy