CVE-2017-2782: XSS
An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2782?
CVE-2017-2782 has a high severity rating due to the potential for a controlled out-of-bounds copy operation.
How do I fix CVE-2017-2782?
To fix CVE-2017-2782, update to a patched version of InsideSecure MatrixSSL if one is available.
What versions are affected by CVE-2017-2782?
CVE-2017-2782 specifically affects InsideSecure MatrixSSL version 3.8.7b.
What type of vulnerability is CVE-2017-2782?
CVE-2017-2782 is classified as an integer overflow vulnerability in the x509 certificate parsing functionality.
Can CVE-2017-2782 be exploited remotely?
Yes, CVE-2017-2782 can potentially be exploited remotely by using specially crafted x509 certificates.