{"id":"CVE-2017-14627","aliases":["EUVD-2017-6127","GHSA-j7xc-3fxr-8g7p"],"status":"published","title":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute...","description":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.19022,"percentile":0.97323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2017-09-23T20:00:00Z","modified":"2026-06-17T01:06:30Z","exploits":[{"source":"exploitdb","id":"EDB-42777","title":"CyberLink LabelPrint \u003c 2.5 - Local Buffer Overflow (SEH Unicode)","type":"local","platform":"windows","date":"2017-09-23","verified":true,"url":"https://www.exploit-db.com/exploits/42777"},{"source":"exploitdb","id":"EDB-45985","title":"CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)","type":"local","platform":"windows","date":"2018-12-13","verified":true,"url":"https://www.exploit-db.com/exploits/45985"},{"source":"metasploit","id":"exploit/windows/fileformat/cyberlink_lpp_bof","title":"CyberLink LabelPrint 2.5 Stack Buffer Overflow","type":"exploit","platform":"Windows","date":"2017-09-23","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/fileformat/cyberlink_lpp_bof"}],"products":[{"vendor":"cyberlink","product":"labelprint"}],"references":[{"url":"https://www.exploit-db.com/exploits/42777/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/45985/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14627"},{"url":"https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5"},{"url":"https://www.exploit-db.com/exploits/42777"},{"url":"https://www.exploit-db.com/exploits/45985"},{"url":"https://github.com/advisories/GHSA-j7xc-3fxr-8g7p"}],"sources":{"cve":[{"id":"CVE-2017-14627","description":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.","status":"published","published":"2017-09-23T20:00:00Z","modified":"2024-08-05T19:34:38.634Z","updated_at":"2026-11-02T14:33:11.928814Z"}],"euvd":[{"id":"EUVD-2017-6127","description":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.","status":"published","published":"2017-09-23T20:00:00Z","modified":"2024-08-05T19:34:38Z","updated_at":"2026-11-03T02:23:16.177631Z"}],"ghsa":[{"id":"GHSA-j7xc-3fxr-8g7p","title":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute...","description":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.","status":"published","published":"2022-05-14T01:48:51Z","modified":"2025-04-20T03:46:50Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:52.747248Z"}],"nvd":[{"id":"CVE-2017-14627","description":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.","status":"published","published":"2017-09-23T20:29:00.187Z","modified":"2026-06-17T01:06:30.91Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:59.716532Z"}]}}