CVE-2016-8715

High

Published: 28/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution.

Risk Assessment

An attacker can exploit this vulnerability by sending a malicious PDF file, potentially leading to system compromise.

Recommendation

It is recommended to update Iceni Argus to the latest version to mitigate this vulnerability and implement PDF file filtering to reduce risk.

Other vulnerabilities in Iceni Argus version 6.6.05

CVE-2016-8333High
In version 6.6.04 of Iceni Argus, there is a stack-based buffer overflow vulnerability in the ipfSetColourStroke function. A specially crafted PDF file can cause a buffer overflow, leading to arbitrary code execution.

Original NVD description (English source)

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability.