Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbit…

Published 10 y ago 2016-07-03 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.8

v3.0 · NVD

CISA KEV

not known exploited

EPSS

45.6%

percentile 99%

Public exploits

Exploit-DB

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (3) the PrinterName property value to ProfileEditor.PrintPasteControl in ProfEdit.dll, (4) the Data argument to the WriteRecords function in FTXBIFFLib.AS400FtxBIFF in FtxBIFF.dll, (5) the Serialized property value to NMSECCOMPARAMSLib.SSL3 in NMSecComParams.dll, (6) the UserName property value to NMSECCOMPARAMSLib.FirewallProxy in NMSecComParams.dll, (7) the LUName property value to ProfileEditor.MFSNAControl in ProfEdit.dll, (8) the newVal argument to the Load function in FTPSFTPLib.SFtpSession in FTPSFtp.dll, or (9) a long Host field in the FTP Client.

Exploit prediction (EPSS)

45.55% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

EDB-39857 Micro Focus Rumba+ 9.4 - Multiple Stack Buffer Overflow Vulnerabilities · dos · 2016-05-26

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	9.8	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	10.0	`AV:N/AC:L/Au:N/C:C/I:C/A:C`

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cxsecurity.com /issue/WLB-2016050136 · x_refsource_MISC, x_transferred
securityfocus.com /bid/91548 · vdb-entry, x_refsource_BID, x_transferred
community.microfocus.com /microfocus/mainframe_solutions/rumba/w/knowledge_base/28601.rumba-9-4-stack-buffer-overfl · x_refsource_CONFIRM, x_transferred
zeroscience.mk /en/vulnerabilities/ZSL-2016-5327.php · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2016-1606
NVD: CVE-2016-1606

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.