#VU7471 Memory corruption in V-Server - CVE-2017-9639

Vulnerability identifier: #VU7471

Vulnerability risk: High

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2017-9639

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
V-Server

Software vendor:
Fuji Electric

The vulnerability allows a remote attacker to execute arbitrary code.

The weakness exists due to boundary error. A remote attacker can send specially crafted file, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may result in system compromise.

Update to version 4.0.1.
http://proself.hakko-elec.co.jp/proself/publicweb/publicweb.go/EKzkQAiIvMzAVF0Bg-FcEz9DkGitzZP0H8fRb...

• http://www.isssource.com/fuji-mitigates-electric-v-server-issue/