CVE-2017-9544
CriticalSummary
There is a remote stack-based buffer overflow in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. An attacker may send an overly long username string to registresult.htm, potentially allowing arbitrary code execution.
Risk Assessment
This vulnerability could allow an attacker to execute arbitrary code remotely, posing a significant threat to the security of the system and user data.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Original NVD description (English source)
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.