CVE-2018-7687 – Client for OES Elevation of Privilege via Buffer Overflow

https://notcve.org/view.php?id=CVE-2018-7687

21 May 2018 — The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys. Micro Focus Client for OES, en versiones anteriores a la 2 SP4 IR8a, tiene una vulnerabilidad que podría permitir que un atacante local eleve sus privilegios mediante un desbordamiento de búfer en ncfsd.sys. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Micro Focus Client for Open Enterprise ... • https://bugzilla.novell.com/show_bug.cgi?id=1093607 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •