PT-2017-15590

CVE-2017-2880

·

Publicado

2017-10-05

·

Atualizado

2022-06-07

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Computerinsel Photoline version 20.02
Description A memory corruption issue exists in the .GIF parsing functionality, allowing potential code execution through a specially crafted .GIF file. An attacker can trigger this issue by sending a specific .GIF file.
Recommendations For Computerinsel Photoline version 20.02, avoid using the .GIF parsing functionality until a patch is available. As a temporary workaround, consider restricting the ability to open or process .GIF files to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾