Vulnerability Details CVE-2018-17408
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.428
EPSS Ranking 97.3%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
Products affected by CVE-2018-17408
-
cpe:2.3:a:zahiraccounting:zahir_enterprise_plus:6