CVE-2017-11673: Input Validation

Published Jul 27, 2017

Updated

Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related to a "User Mode Write AV starting at reporter!madTraceProcess."

Affected Software

1 affected component

Acunetix Web Vulnerability Scanner=8

Event History

Jul 27, 2017

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is CVE-2017-11673?

CVE-2017-11673 is a vulnerability in Acunetix 8 allowing remote attackers to execute arbitrary code or crash the application by using a malformed PRE file.

What is the severity of CVE-2017-11673?

CVE-2017-11673 is considered a critical vulnerability due to its ability to allow remote code execution.

How do I fix CVE-2017-11673?

To fix CVE-2017-11673, update your Acunetix 8 to the latest version provided by the vendor.

Which software is affected by CVE-2017-11673?

CVE-2017-11673 affects Acunetix Web Vulnerability Scanner version 8.

How can I protect against exploits leveraging CVE-2017-11673?

To protect against exploits of CVE-2017-11673, ensure that Acunetix 8 is updated and follow security best practices to limit exposure.