CVE-2017-9282

Critical

Published: 21/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5.

Risk Assessment

Heap corruption may lead to unpredictable application behavior, posing a risk for further attacks on the system.

Recommendation

It is recommended to update to the latest version of the software to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.