CVE-2017-2780
CriticalSummary
InsideSecure MatrixSSL 3.8.7b has a heap buffer overflow vulnerability related to X509 certificate parsing. A specially crafted X509 certificate can cause a buffer overflow, leading to remote code execution.
Risk Assessment
This vulnerability could allow attackers to execute remote code on vulnerable client or server applications, posing a significant security threat to systems.
Recommendation
It is recommended to update to the latest version of InsideSecure MatrixSSL to mitigate this vulnerability and implement additional certificate verification mechanisms.
Original NVD description (English source)
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.