VULNERABILITY INTELLIGENCE
CVE-2017-14627
CVSS score7.8 HIGH
EPSS probability19.02%
CISA KEVNot currently listed
Published2017-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- cve@mitre.org — Exploit, Technical Description, Third Party Advisory
- cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108