VULNERABILITY INTELLIGENCE

CVE-2017-9544

CVSS score9.8 CRITICAL
EPSS probability24.12%
CISA KEVNot currently listed
Published2017-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references