CVE-2017-7523CWE-787

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service…

published July 21, 2017

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02746 · 86.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2017-07-21T22:00Z
EPSS history
Timeline
  • 21 JUL 22:00Z
    Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service…
    cvelistv5