CVE-2017-7310

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 54%

from disclosure to weapon0 days

Published on NVDMar 29

1st PoCMar 29

metasploitMar 29

exploitation probability

54%top 1% of all CVEs

observed exploitation

nono source reports it

8 public exploit(s)

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.

Affected products

n/a · n/a

public PoCs found — 8✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/43875 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/41773 exploitdbwww.exploit-db.com/exploits/44157unverified cve_referencewww.exploit-db.com/exploits/43875/unverified cve_referencewww.exploit-db.com/exploits/41771/unverified cve_referencewww.exploit-db.com/exploits/44157/unverified cve_referencewww.exploit-db.com/exploits/41772/unverified cve_referencewww.exploit-db.com/exploits/41773/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://www.exploit-db.com/exploits/41771/https://www.exploit-db.com/exploits/41772/https://www.exploit-db.com/exploits/41773/https://www.exploit-db.com/exploits/43875/https://www.exploit-db.com/exploits/44157/http://www.diskboss.com/news.html http://www.diskpulse.com/news.html http://www.disksavvy.com/news.html http://www.disksorter.com/news.html http://www.dupscout.com/news.html http://www.securityfocus.com/bid/97237 http://www.syncbreeze.com/news.html