CVE-2017-7908

CVE-2017-7908 describes a high-severity heap-based buffer overflow in the Gigasoft v5 and prior third-party product, specifically when included in GE Communicator 3.15 and prior, and GE ProEssentials. An attacker could exploit this by tricking a user into opening a malicious HTML file that loads vulnerable ActiveX controls, leading to potential denial of service and limited impact on confidentiality and integrity. The vulnerability has a CVSSv3 score of 7.6 (HIGH) due to its network-based attack vector and low attack complexity, requiring user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.