CVE-2017-14731

Name of the Vulnerable Software and Affected Versions LibOFX version 0.9.12

Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This can be demonstrated by an ofxdump call.

Recommendations For LibOFX version 0.9.12, consider avoiding the use of crafted files with ofxdump until a patch is available. As a temporary workaround, restrict access to the ofx proc file function in ofx preproc.cpp to minimize the risk of exploitation.