A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before…

published 2017-03-29 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-16337

cvss: 7.8; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 53.7%; EPSS 53.7% chance of exploitation in 30 days, percentile 99%
public exploits: 5; Metasploit, Exploit-DB

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.

Timeline

2017-03-29 First public exploit (Metasploit exploit/windows/fileformat/dupscout_xml)
2017-03-29 Published

Exploit prediction

53.65% chance of exploitation in the next 30 days, higher than 99% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Metasploit exploit/windows/fileformat/dupscout_xml Dup Scout Enterprise v10.4.16 - Import Command Buffer Overflow metasploit exploit, normal rank, 2017-03-29
Metasploit exploit/windows/fileformat/syncbreeze_xml Sync Breeze Enterprise 9.5.16 - Import Command Buffer Overflow metasploit exploit, normal rank, 2017-03-29
EDB-44157 Disk Pulse Enterprise 10.4.18 - 'Import Command' Buffer Overflow (SEH) remote, 2018-02-21
EDB-43875 Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow (Metasploit) local, 2018-01-24
EDB-41773 Sync Breeze Enterprise 9.5.16 - 'Import Command' Local Buffer Overflow local, 2017-03-29
exploit-db.com https://www.exploit-db.com/exploits/41771/ referenced PoC, tagged "exploit" by a source, unverified
exploit-db.com https://www.exploit-db.com/exploits/41772/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.0	7.8	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD	2.0	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

exploit-db.com /exploits/41771/
exploit, third-party-advisory, vdb-entry
exploit-db.com /exploits/43875/
exploit
exploit-db.com /exploits/44157/
exploit
exploit-db.com /exploits/41773/
exploit, third-party-advisory, vdb-entry
exploit-db.com /exploits/41772/
exploit, third-party-advisory, vdb-entry
dupscout.com /news.html
diskpulse.com /news.html
diskboss.com /news.html
vxsearch.com /news.html
disksorter.com /news.html
securityfocus.com /bid/97237
vdb-entry, third-party-advisory
disksavvy.com /news.html
syncbreeze.com /news.html

Sources

CVE List CVE-2017-7310
NVD CVE-2017-7310

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary