High severity8.8NVD Advisory· Published Sep 13, 2017· Updated Jun 17, 2026
CVE-2017-2816
CVE-2017-2816
Description
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- cpe:2.3:a:libofx_project:libofx:0.9.11:*:*:*:*:*:*:*
- osv-coords4 versionspkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/libofx&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3
< 0.9.9-3.7.1+ 3 more
- (no CPE)range: < 0.9.9-3.7.1
- (no CPE)range: < 0.9.0-3.7.1
- (no CPE)range: < 0.9.9-3.7.1
- (no CPE)range: < 0.9.9-3.7.1
- LibOFX/LibOfxv5Range: 0.9.11
Patches
Vulnerability mechanics
References
4- www.talosintelligence.com/vulnerability_reports/TALOS-2017-0317nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/100828nvdBroken LinkThird Party AdvisoryVDB Entry
- lists.debian.org/debian-lts-announce/2017/11/msg00038.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/201908-26nvdThird Party Advisory
News mentions
0No linked articles in our index yet.