CVE-2017-16253

HIGH Year: 2017
CVSS v3 Score
8.5
High
CVSS v2 Score
5.5
Medium
Weakness Type
CWE-787
View all →

Vulnerability Description

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012 for the cc channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary data. An attacker can send an authenticated HTTP request At 0x9d014dd8 the value for the id key is copied using strcpy to the buffer at $sp+0x290. This buffer is 32 bytes large, sending anything longer will cause a buffer overflow.

Related Vulnerabilities

CVE-2017-14446

HIGH
CVSS:8.5(High)

An exploitable stack-based buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implementation unsafely extracts parameters from the query string, leading...

CWE-7872017

CVE-2017-16252

HIGH
CVSS:8.5(High)

Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause a stack-based buffer overflow overwriting arbitrary data. An attacker should sen...

CWE-7872017

CVE-2017-16254

HIGH
CVSS:8.5(High)

An exploitable buffer overflow vulnerability exists in the PubNub message handler Insteon Hub 2245-222 - Firmware version 1012. Specially crafted commands sent through the PubNub service can cause a s...

CWE-7872017

CVE-2022-28182

HIGH
CVSS:8.5(High)

NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), where an unauthorized attacker on the network can cause an out-of-bounds write throug...

CWE-7872022

CVE-2016-4331

HIGH
CVSS:8.6(High)

When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library will fail to ensure that the precision is within the bounds of the size leading to arbitrary code execut...

CWE-7872016

CVE-2016-8728

HIGH
CVSS:8.6(High)

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap me...

CWE-7872016