CVE-2016-8715

—

CVSS 3.1

7.8 high

EPSS

2%p78

Published

Feb 28, 2017 (Feb 28, 2017)

Modified

Jun 17, 2026

Description

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability.

Vendors: iceni
Products: argus
Weakness: CWE-119
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news1 stories

Vulnerability Spotlight: Multiple remote code execution vulnerabilities in Iceni Argus PDF Content Extraction affect MarkLogic

Cisco TalosFeb 27, 17:59 UTC · Feb 27, 2017Vulnerability in the wildCVE-2016-8385 CVE-2016-8386 CVE-2016-8387+4 CVEs