CVE-2017-2779
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVIEW 2014. A specially crafted Virtual Instrument (VI) file can cause an attacker controlled looping condition resulting in an arbitrary null write. An attacker controlled VI file can be used to trigger this vulnerability and can potentially result in code execution.
Existe una vulnerabilidad de corrupción de memoria explotable en la funcionalidad de análisis de segmentos RSRC de LabVIEW 2017, LabVIEW 2016, LabVIEW 2015 y LabVIEW 2014. Un archivo de Instrumento Virtual (VI) especialmente diseñado puede causar una condición de bucle controlada por un atacante que resulta en una escritura nula arbitraria. Un archivo VI controlado por un atacante puede ser utilizado para desencadenar esta vulnerabilidad y puede potencialmente resultar en la ejecución de código
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-12-01 CVE Reserved
- 2017-09-05 CVE Published
- 2023-07-16 EPSS Updated
- 2024-09-16 CVE Updated
- 2024-09-16 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/100519 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://0patch.blogspot.com/2017/09/0patching-rsrc-arbitrary-null-write.html | 2024-09-16 | |
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0273 | 2024-09-16 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.ni.com/product-documentation/54099/en | 2022-04-19 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ni Search vendor "Ni" | Labview Search vendor "Ni" for product "Labview" | 2014 Search vendor "Ni" for product "Labview" and version "2014" | - |
Affected
| ||||||
Ni Search vendor "Ni" | Labview Search vendor "Ni" for product "Labview" | 2015 Search vendor "Ni" for product "Labview" and version "2015" | - |
Affected
| ||||||
Ni Search vendor "Ni" | Labview Search vendor "Ni" for product "Labview" | 2016 Search vendor "Ni" for product "Labview" and version "2016" | - |
Affected
| ||||||
Ni Search vendor "Ni" | Labview Search vendor "Ni" for product "Labview" | 2017 Search vendor "Ni" for product "Labview" and version "2017" | - |
Affected
|