Libofx Project vulnerabilities
3 vulnerabilities
Known vulnerabilities in Libofx Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Libofx3 vulnerabilities
CVE-2017-2816debianlibofx+4
EPSS score2.39%
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability.CVE-2017-14731debianlibofx+2EPSS score1.26%
ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.CVE-2019-9656canonicalubuntu_linux+7EPSS score2.14%
An issue was discovered in LibOFX 0.9.14. There is a NULL pointer dereference in the function OFXApplication::startElement in the file lib/ofx_sgml.cpp, as demonstrated by ofxdump.