CVE-2017-11328

Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file

published July 14, 2017

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00674 · 51.3th percentile
Published
2017-07-14T05:00Z
EPSS history
Timeline
  • 14 JUL 05:00Z
    Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attack by scanning a crafted .NET file
    cvelistv5