CVE-2017-9544

critical · 9.8

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

9.8

CVSS

24.1%

EPSS (exploit prob.)

98th

EPSS percentile

2017-06-12

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
echatserver	easy_chat_server	>= 2.0, <= 3.1

Check a specific version with /api/v1/cve/match.

References

https://www.exploit-db.com/exploits/42155/
https://www.exploit-db.com/exploits/42155/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-9544