Medium severity6.5NVD Advisory· Published Sep 25, 2017· Updated Jun 17, 2026
CVE-2017-14731
CVE-2017-14731
Description
ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:libofx_project:libofx:0.9.12:*:*:*:*:*:*:*
- osv-coords4 versionspkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3
< 0.9.9-3.7.1+ 3 more
- (no CPE)range: < 0.9.9-3.7.1
- (no CPE)range: < 0.9.0-3.7.1
- (no CPE)range: < 0.9.9-3.7.1
- (no CPE)range: < 0.9.9-3.7.1
Patches
Vulnerability mechanics
References
3- github.com/libofx/libofx/issues/10nvdExploitIssue TrackingPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2017/11/msg00038.htmlnvd
- security.gentoo.org/glsa/201908-26nvd
News mentions
0No linked articles in our index yet.