CVE-2020-7816

Name of the Vulnerable Software and Affected Versions DaView Indy (affected versions not specified) DaVa+ (affected versions not specified) DaOffice (affected versions not specified)

Description A vulnerability in the JPEG image parsing module could allow an unauthenticated, remote attacker to cause arbitrary code execution on an affected device. The issue is due to a stack overflow read. An attacker could exploit this by sending a crafted PDF file to an affected device.

Recommendations For DaView Indy, update to a version that fixes the stack overflow read issue in the JPEG image parsing module. For DaVa+, update to a version that fixes the stack overflow read issue in the JPEG image parsing module. For DaOffice, update to a version that fixes the stack overflow read issue in the JPEG image parsing module. As a temporary workaround, consider restricting the handling of crafted PDF files until a patch is available.