CVE-2017-14627

HIGH 7.8CVE-2017-14627 · Published 23/09/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
labelprint cyberlink	`= 2.5`	No fix yet

Description

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.

References

blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5 · Exploit
exploit-db.com/exploits/42777 · Exploit
exploit-db.com/exploits/45985

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free