CVSS 3.0
7.6 highCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:HCVE-2017-7908
A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-122
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ge:ge_communicator
- gigasoft:proessentials