60
CVE-2016-8388
PoC —CVSS 3.1
7.8 high
EPSS
2%p78
Published
()
Modified
Description
An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects.
- Vendors
- iceni
- Products
- argus
- Weakness
- CWE-125
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H