CVE-2017-9544

9.8 criticalEPSS 24%

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2017-06-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

echatserver:easy_chat_server

References

https://www.exploit-db.com/exploits/42155/
https://www.exploit-db.com/exploits/42155/

Check your stack JSON