CVE-2017-2777

Name of the Vulnerable Software and Affected Versions: Iceni Argus version 6.6.05

Description: A heap overflow issue exists due to an integer overflow in the ipStringCreate function. This can be triggered by a specially crafted pdf file, allowing an attacker to exploit the issue.

Recommendations: For version 6.6.05, consider avoiding the use of the ipStringCreate function until a patch is available. As a temporary workaround, restrict the handling of pdf files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.