What’s Vulnerable › Vulnerabilities

CVE-2017-14627

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 19.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-09-23 · updated 2026-06-17
• Weakness: CWE-119

Description

Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.

Affected products

• Cyberlink Labelprint: 2.5

References

• https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/
• https://www.exploit-db.com/exploits/42777/
• https://www.exploit-db.com/exploits/45985/
• https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/
• https://www.exploit-db.com/exploits/42777/
• https://www.exploit-db.com/exploits/45985/

Get alerted when CVE-2017-14627 or the next vulnerability affects your stack