CVE-2017-7523

CVE-2017-7523 describes a buffer overflow vulnerability in Cygwin versions 1.7.2 through 1.8.0, specifically within the wcsxfrm/wcsxfrm_l functions. This flaw can lead to a denial-of-service by crashing the process or potentially allow for process hijacking with administrative privileges through a specially crafted input string. Rated with a CVSS score of 7.5 (HIGH), it is a network-exploitable vulnerability with low attack complexity and no user interaction required, primarily impacting availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in common frameworks like Metasploit or Nuclei, and it has received minimal community discussion or media coverage.