What is CVE-2017-2788?

CVE-2017-2788 is a critical-severity vulnerability in Pharos Popup, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 10.0/10. Published 2017-03-10.

How severe is CVE-2017-2788?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Buffer overflow in Pharos Popup

CVE-2017-2788

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remo…

Vulnerability class: Buffer Overflow

EPSS: 0.078 (93.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Pharos Popup — versions 9.0
Pharos Popup Printer Client — versions 9.0

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

talos-cna@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
talos-cna@cisco.com (Technical Description, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-2788?: CVE-2017-2788 is a critical-severity vulnerability in Pharos Popup, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 10.0/10. Published 2017-03-10.
How severe is CVE-2017-2788?: Critical severity. CVSS v3 base score is 10.0 out of 10.