CVE-2017-2785: Pharos Popup

Critical severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit.

Affected products

• Pharos Popup: version 9.0 only

Published 2017-03-10. Last modified 2026-06-17.