CVE-2017-7310

CVE-2017-7310 describes a buffer overflow vulnerability in the Import Command feature of several Flexense products, including SyncBreeze, DiskSorter, DiskBoss, DiskPulse, DiskSavvy, DupScout, and VX Search, all before version 10.6. This flaw allows unauthenticated attackers to execute arbitrary code by supplying a specially crafted XML file containing an overly long 'name' attribute within a 'classify' element. With a CVSSv3 score of 7.8 (High), successful exploitation requires user interaction (UI:R) but has low attack complexity (AC:L), leading to potential full compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). While not listed in CISA's KEV catalog, public exploit code, including Metasploit modules and ExploitDB entries, is readily available, indicating a high likelihood of exploitation despite minimal community discussion or media coverage.