CVE-2017-9544: Echatserver Easy Chat Server

Critical severity, CVSS 9.8. EPSS: 24.1% chance of exploitation in the next 30 days.

There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1. By sending an overly long username string to registresult.htm for registering the user, an attacker may be able to execute arbitrary code.

Affected products

• Echatserver Easy Chat Server: from 2.0, up to and including 3.1

Published 2017-06-12. Last modified 2026-06-17.