PT-2021-7050
CVE-2021-38098
·
تاريخ النشر
2021-03-01
·
تاريخ التحديث
2021-10-07
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Corel PDF Fusion version 2.6.2.0
Description
The issue is related to a heap corruption vulnerability when parsing a crafted file, which can allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious PDF file.
Recommendations
For Corel PDF Fusion version 2.6.2.0, consider avoiding the use of crafted PDF files until a patch is available. As a temporary workaround, restrict the opening of PDF files from untrusted sources to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾