CVE-2016-8386 Memory corruption in Argus
Heap-based buffer overflow in Iceni Argus allows code execution via malformed PDF fonts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2016-8386?
CVE-2016-8386 is a high-severity memory corruption vulnerability in Iceni Argus, published on 27 Feb 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will attempt to use a size out of the font to search through a linked list of buffers to return. Due to a signedness issue, a buffer smaller than the requested size will be returned. Later when the tool tries to populate this buffer, the overflow will occur which can lead to code execution under the context of the user running the tool.
Weakness: CWE-787
Which versions are affected by CVE-2016-8386?
It affects 1 product.
Products include Iceni Argus.
How do I fix CVE-2016-8386?
No fix has been published for CVE-2016-8386 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-8386 being exploited?
There is no known exploitation of CVE-2016-8386 in the wild and no public exploit code.
Other vulnerabilities in Iceni Argus
Sources
Also known as GHSA-pc83-6763-fqcx.