What’s Vulnerable › Vulnerabilities

CVE-2017-9544

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 24.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-06-12 · updated 2026-06-17
• Weakness: CWE-787

Description

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

Affected products

• Echatserver Easy Chat: from 2.0 through 3.1

References

• https://www.exploit-db.com/exploits/42155/
• https://www.exploit-db.com/exploits/42155/

Get alerted when CVE-2017-9544 or the next vulnerability affects your stack