CVE-2017-9282 — Micro Focus / Micro Focus VisiBroker

Description (CNA)

An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed.

Affected (CNA)

Vendor / product	Versions
Micro Focus / Micro Focus VisiBroker	affected VisiBroker 8.5 prior to SP4 HF3

CWE

CWE-190

References

https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes

ADP enrichment

CVE

No English description supplied.

https://community.microfocus.com/microfocus/corba/visibroker_-_world_class_middleware/w/knowledge_base/29171/visibroker-8-5-service-pack-4-hotfix-3-security-fixes