An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/99249 | vdb entry third party advisory broken link |
| https://talosintelligence.com/vulnerability_reports/TALOS-2017-0276 | exploit vdb entry third party advisory |