CVE-2017-7523

High

Published: 21/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow in wcsxfrm/wcsxfrm_l functions, leading to denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.

Risk Assessment

This vulnerability may lead to denial-of-service and allow attackers to hijack processes with administrative privileges, posing a serious security threat to the system.

Recommendation

It is recommended to update Cygwin to a version newer than 1.8.0 to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in Cygwin

CVE-2016-3067Critical
Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.

Original NVD description (English source)

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.