Vulnerability record · CVE-2016-8335 · published 28 October 2016

CVE-2016-8335: Iceni argus memory buffer overflow vulnerability

Iceni · Argus

An exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 (Sep 7 2012) NK - Linux x64 and Version 6.6.04 (Nov 14 2014) NK - Windows x64. A specially crafted pdf file can cause a buffer overflow resulting in arbitrary code execution. An attacker can send/provide malicious pdf file to trigger this vulnerability.

7.8 CVSS 3.0 High EPSS 2.1% · top 19.4% CWE-119 · Memory buffer overflow

7.8CVSS 3.0 base score, v2 6.8

2.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Argus Iceni

References

Link	Tags
http://www.securityfocus.com/bid/93936
http://www.talosintelligence.com/reports/2016-TALOS-0202/	ExploitThird Party Advisory
http://www.securityfocus.com/bid/93936
http://www.talosintelligence.com/reports/2016-TALOS-0202/	ExploitThird Party Advisory

Track CVE-2016-8335 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-3332Iceni argus memory buffer overflow vulnerabilityStack-based buffer overflow in Iceni Argus 6.20 and earlier and Infix 5.04 allows remote attackers to execute arbitrary code via a crafted PDF docume…EPSS 6.0%6 Oct 2011 7.8CVE-2017-2777Iceni argus integer overflow vulnerabilityAn exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can caus…EPSS 1.0%17 Sep 2018 7.8CVE-2016-8388Iceni argus out-of-bounds read vulnerabilityAn exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicit…EPSS 1.9%28 Feb 2017 7.8CVE-2016-8389Iceni argus integer overflow vulnerabilityAn exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to conve…EPSS 2.1%28 Feb 2017 7.8CVE-2016-8715Iceni argus memory buffer overflow vulnerabilityAn exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can …EPSS 1.9%28 Feb 2017 7.8CVE-2016-8385Iceni argus out-of-bounds write vulnerabilityAn exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a…EPSS 2.3%27 Feb 2017 7.8CVE-2016-8386Iceni argus out-of-bounds write vulnerabilityAn exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will …EPSS 2.3%27 Feb 2017 7.8CVE-2016-8387Iceni argus out-of-bounds write vulnerabilityAn exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encod…EPSS 2.3%27 Feb 2017

Source: NIST National Vulnerability Database (record CVE-2016-8335), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.