Vulnerability record · CVE-2016-8715 · published 28 February 2017

CVE-2016-8715: Iceni argus memory buffer overflow vulnerability

Iceni · Argus

An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A specially crafted PDF file can cause a heap corruption resulting in arbitrary code execution. An attacker can send/provide a malicious PDF file to trigger this vulnerability.

7.8 CVSS 3.1 High EPSS 1.9% · top 21.1% CWE-119 · Memory buffer overflow

7.8CVSS 3.1 base score, v2 6.8

1.9%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Argus Iceni

References

Link	Tags
http://www.securityfocus.com/bid/96470	Broken LinkThird Party AdvisoryVDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0228/	Technical DescriptionThird Party Advisory
http://www.securityfocus.com/bid/96470	Broken LinkThird Party AdvisoryVDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0228/	Technical DescriptionThird Party Advisory

Track CVE-2016-8715 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-3332Iceni argus memory buffer overflow vulnerabilityStack-based buffer overflow in Iceni Argus 6.20 and earlier and Infix 5.04 allows remote attackers to execute arbitrary code via a crafted PDF docume…EPSS 6.0%6 Oct 2011 7.8CVE-2017-2777Iceni argus integer overflow vulnerabilityAn exploitable heap overflow vulnerability exists in the ipStringCreate function of Iceni Argus Version 6.6.05. A specially crafted pdf file can caus…EPSS 1.0%17 Sep 2018 7.8CVE-2016-8388Iceni argus out-of-bounds read vulnerabilityAn exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicit…EPSS 1.9%28 Feb 2017 7.8CVE-2016-8389Iceni argus integer overflow vulnerabilityAn exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt to conve…EPSS 2.1%28 Feb 2017 7.8CVE-2016-8385Iceni argus out-of-bounds write vulnerabilityAn exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a…EPSS 2.3%27 Feb 2017 7.8CVE-2016-8386Iceni argus out-of-bounds write vulnerabilityAn exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the tool will …EPSS 2.3%27 Feb 2017 7.8CVE-2016-8387Iceni argus out-of-bounds write vulnerabilityAn exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multiple encod…EPSS 2.3%27 Feb 2017 7.8CVE-2016-8335Iceni argus memory buffer overflow vulnerabilityAn exploitable stack based buffer overflow vulnerability exists in the ipNameAdd functionality of Iceni Argus Version 6.6.04 (Sep 7 2012) NK - Linux …EPSS 2.1%28 Oct 2016

Source: NIST National Vulnerability Database (record CVE-2016-8715), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.