CVE-2016-8333
HighSummary
In version 6.6.04 of Iceni Argus, there is a stack-based buffer overflow vulnerability in the ipfSetColourStroke function. A specially crafted PDF file can cause a buffer overflow, leading to arbitrary code execution.
Risk Assessment
An attacker can provide a malicious PDF file, creating a risk of unauthorized code execution on the system, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update Iceni Argus to the latest version to mitigate this vulnerability and implement filters to scan PDF files before opening them.
Other vulnerabilities in Iceni Argus version 6.6.04
Original NVD description (English source)
An exploitable stack-based buffer overflow vulnerability exists in the ipfSetColourStroke functionality of Iceni Argus version 6.6.04 A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can provide a malicious pdf file to trigger this vulnerability.