CVE-2023-47586

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 15, 2023
Updated: Nov 21, 2023
CWE ID 787

Summary

CVE-2023-47586 is a critical vulnerability affecting V-Server V4.0.18.0 and earlier, as well as V-Server Lite V4.0.18.0 and earlier. Multiple heap-based buffer overflow issues have been identified, which can be triggered when a user opens a maliciously crafted VPR file. Successful exploitation of these flaws may result in information disclosure and code execution, posing a significant risk to affected systems. Users are strongly advised to update their V-Server and V-Server Lite installations to the latest versions to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share