CVE-2017-2788: Pharos Popup

Critical severity, CVSS 10.0. EPSS: 7.8% chance of exploitation in the next 30 days.

A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially crafted packet can be sent to the victim's computer and can lead to a heap based buffer overflow resulting in potential remote code execution. This client is always listening, has root privileges, and requires no user interaction to exploit.

Affected products

• Pharos Popup: version 9.0 only

Published 2017-03-10. Last modified 2026-06-17.