CVE-2017-8305

Critical

Published: 27/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

UDFclient (before version 0.8.8) has a custom strlcpy implementation that is vulnerable to buffer overflow. This issue occurs on systems with a C library that lacks its own strlcpy.

Risk Assessment

Buffer overflow can lead to arbitrary code execution, posing a significant security risk to the system.

Recommendation

It is recommended to update UDFclient to version 0.8.8 or later to mitigate this vulnerability.

Original NVD description (English source)

The UDFclient (before 0.8.8) custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on systems with a C library (e.g., glibc) that lacks its own strlcpy.