Skip to content
OpenAdvisories
Unscored CVE-2017-7523 EUVD-2017-16540GHSA-vhqx-rr9r-7jww

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting in…

Published Jul 21, 2017 · Updated Sep 16, 2024 · Assigned by redhat

Description

Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input string.

Affected products

VendorProductAffectedFixed
Red Hat cygwin since 1.7.2 up to 2.8.0 —

References