CVE-2017-17946

CVE-2017-17946 describes a critical buffer overflow vulnerability in Novosoft Handy Password version 4.9.3. This flaw allows unauthenticated remote attackers to execute arbitrary code by supplying an excessively long "Title name" in "mail box" data, which is then mishandled during an "Open from mail box" action. With a CVSS score of 9.8, this vulnerability poses a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.