CVE-2017-7310

높음 7.8CVE-2017-7310 · Published 29/03/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
diskboss flexense	`= 7.8.16`	No fix yet
disksorter flexense	`= 9.5.12`	No fix yet
syncbreeze flexense	`= 9.5.16`	No fix yet

Description

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.

References

diskboss.com/news.html
diskpulse.com/news.html
disksavvy.com/news.html
disksorter.com/news.html
dupscout.com/news.html
securityfocus.com/bid/97237 · Third Party Advisory
syncbreeze.com/news.html
vxsearch.com/news.html
exploit-db.com/exploits/41771 · Exploit
exploit-db.com/exploits/41772 · Exploit
exploit-db.com/exploits/41773 · Exploit
exploit-db.com/exploits/43875
exploit-db.com/exploits/44157

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free