CVE-2017-12705

A Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted project file may be able to trigger a heap-based buffer overflow, which may crash the process and allow an attacker to execute arbitrary code.

Score

CVSS 3.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-10-25

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-122

Affected products

• Webop (Advantech)

References

• http://www.securityfocus.com/bid/99476
• https://ics-cert.us-cert.gov/advisories/ICSA-17-227-01