{"id":"CVE-2017-7310","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-7310","generatedAt":"2026-10-28T19:03:08.096Z","title":"A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary…","description":"A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitrary code via a crafted XML file containing a long name attribute of a classify element.","published":"2017-03-29T21:59:00.000Z","lastModified":"2026-06-17T01:24:07.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":7.8,"severity":"HIGH","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["flexense/diskboss","flexense/disksorter","flexense/syncbreeze"],"epss":{"score":0.53651,"percentile":0.98988,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.61609,"percentile":0.99157},{"date":"2026-09-22","score":0.53651,"percentile":0.98945}]},"kev":{"listed":false},"exploits":{"count":3,"verified":true,"firstPublished":"2017-03-29","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":44157,"kind":"exploit","title":"Disk Pulse Enterprise 10.4.18 - 'Import Command' Buffer Overflow (SEH)","url":"https://www.exploit-db.com/exploits/44157","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/44157.py","file":"exploits/windows/remote/44157.py","published":"2018-02-21","added":"2018-02-21","updated":"2018-02-21","author":"Daniel Teixeira","type":"remote","platform":"windows","port":null,"verified":false,"codes":["CVE-2017-7310"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comdiskpulseent_setup_v10.4.18.exe","screenshotUrl":null,"referenceUrl":null},{"edbId":43875,"kind":"exploit","title":"Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/43875","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/43875.rb","file":"exploits/windows/local/43875.rb","published":"2018-01-24","added":"2018-01-24","updated":"2018-01-25","author":"Metasploit","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2017-7310"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":"http://www.exploit-db.comsyncbreezeent_setup_v9.5.16.exe","screenshotUrl":null,"referenceUrl":"https://raw.githubusercontent.com/rapid7/metasploit-framework/a27cfeaea97da5a9b857103cc9eabcbdd04eec6d/modules/exploits/windows/fileformat/syncbreeze_xml.rb"},{"edbId":41773,"kind":"exploit","title":"Sync Breeze Enterprise 9.5.16 - 'Import Command' Local Buffer Overflow","url":"https://www.exploit-db.com/exploits/41773","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/local/41773.py","file":"exploits/windows/local/41773.py","published":"2017-03-29","added":"2017-03-29","updated":"2018-01-24","author":"Daniel Teixeira","type":"local","platform":"windows","port":null,"verified":true,"codes":["CVE-2017-7310"],"tags":null,"aliases":null,"applicationUrl":"http://www.exploit-db.comsyncbreezeent_setup_v9.5.16.exe","screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 53.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-21T00:00:00.000Z","detail":{"to":0.61609,"from":0.53651,"percentile":0.99157},"summary":"EPSS moved from 53.7% to 61.6% probability of exploitation in the next thirty days."}],"references":[{"url":"http://www.diskboss.com/news.html","source":"cve@mitre.org"},{"url":"http://www.diskpulse.com/news.html","source":"cve@mitre.org"},{"url":"http://www.disksavvy.com/news.html","source":"cve@mitre.org"},{"url":"http://www.disksorter.com/news.html","source":"cve@mitre.org"},{"url":"http://www.dupscout.com/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/97237","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://www.syncbreeze.com/news.html","source":"cve@mitre.org"},{"url":"http://www.vxsearch.com/news.html","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/41771/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/41772/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/41773/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/43875/","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/44157/","source":"cve@mitre.org"},{"url":"http://www.diskboss.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.diskpulse.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.disksavvy.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.disksorter.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.dupscout.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/97237","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.syncbreeze.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vxsearch.com/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/41771/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/41772/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/41773/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/43875/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/44157/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-7310","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}