CVE-2017-7506CWE-119

CVE-2017-7506: vulnerability in The SPICE Project spice

Published · Updated

Follow this CVE+ Monitor spice+ Monitor spice

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.2%
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacker to the spice server resulting into crash and/or server memory leak.
Affected products
The SPICE Project · spice