CVE-2017-11367

Name of the Vulnerable Software and Affected Versions shoco through 2017-07-17

Description The issue allows remote attackers to cause a denial of service, resulting in a buffer over-read and application crash, via malformed compressed data. This is related to the shoco decompress function in the API.

Recommendations For versions through 2017-07-17, consider disabling the shoco decompress function until a patch is available to prevent potential denial of service attacks.