{"id":"CVE-2017-14627","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-14627","generatedAt":"2026-10-28T22:20:01.457Z","title":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside…","description":"Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) default (inside the TEXT tag) parameter in an lpp project file.","published":"2017-09-23T20:29:00.000Z","lastModified":"2026-06-17T01:06:31.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":7.8,"severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["cyberlink/labelprint"],"epss":{"score":0.19022,"percentile":0.97291,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.28864,"percentile":0.98114},{"date":"2026-09-22","score":0.19926,"percentile":0.9731}]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2017-09-23","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":45985,"kind":"exploit","title":"CyberLink LabelPrint 2.5 - Stack Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/45985","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/45985.rb","file":"exploits/windows/local/45985.rb","published":"2018-12-13","added":"2018-12-13","updated":"2018-12-13","author":"Metasploit","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2017-14627"],"tags":"Local","aliases":null,"applicationUrl":"http://www.exploit-db.comCyberLink_Power2Go_Downloader.exe","screenshotUrl":null,"referenceUrl":"https://raw.githubusercontent.com/rapid7/metasploit-framework/1ab69c221ce407f673195baf50e65c2430f99c73/modules/exploits/windows/fileformat/cyberlink_lpp_bof.rb"},{"edbId":42777,"kind":"exploit","title":"CyberLink LabelPrint < 2.5 - Local Buffer Overflow (SEH Unicode)","url":"https://www.exploit-db.com/exploits/42777","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/42777.py","file":"exploits/windows/local/42777.py","published":"2017-09-23","added":"2017-09-24","updated":"2018-12-13","author":"f3ci","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2017-14627"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comCyberLink_Power2Go_Downloader.exe","screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 19.0%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-21T00:00:00.000Z","detail":{"to":0.28864,"from":0.19926,"percentile":0.98114},"summary":"EPSS moved from 19.9% to 28.9% probability of exploitation in the next thirty days."}],"references":[{"url":"https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/","tags":["Exploit","Technical Description","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/42777/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/45985/","source":"cve@mitre.org"},{"url":"https://blog.spentera.com/2017/09/19/unicode-stack-based-buffer-overflow-on-cyberlink-labelprint-2-5/","tags":["Exploit","Technical Description","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/42777/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/45985/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-14627","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}