Description
The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Micro Focus | Client for Open Enterprise Server | 2 SP4 (IR8a) – < 2 SP4 (IR8a) | 2 SP4 (IR8a) |