CVE Catalog

CVE-2017-11517

Critical
Published: Translated: NVD NIST

Summary

A stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore versions 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request.

Risk Assessment

Attackers can remotely take control of the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update to the latest version of Geutebrueck Gcore software to mitigate this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute arbitrary code via a long URI in a GET request.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS