CVE-2017-2785

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1480%

EPSS Percentile2.55th

Published2017年3月10日

Last Modified2026年5月13日

Vulnerability Description

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit.

Affected Platforms (CPE)

📦

Pharos

Popup

= 9.0

References & Advisories

🔗 http://www.securityfocus.com/bid/96742

🔗 http://www.talosintelligence.com/reports/TALOS-2017-0280/