CVE-2017-14016: Buffer Overflow
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.220170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the context of the process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Advantech WebAccessto a version that resolves this vulnerability.Fixed in V8.2_20170817
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14016?
CVE-2017-14016 has been assigned a high severity rating due to its potential to allow arbitrary code execution.
How do I fix CVE-2017-14016?
To fix CVE-2017-14016, upgrade Advantech WebAccess to version 8.2_20170817 or later.
What applications are affected by CVE-2017-14016?
CVE-2017-14016 affects Advantech WebAccess versions prior to 8.2_20170817.
What type of vulnerability is CVE-2017-14016?
CVE-2017-14016 is categorized as a stack-based buffer overflow vulnerability.
Can an attacker exploit CVE-2017-14016 remotely?
Yes, an attacker could potentially exploit CVE-2017-14016 remotely due to improper validation of user-supplied data.