PT-2019-15680

CVE-2019-18821

·

Publicado

2019-11-07

·

Atualizado

2019-11-08

Descrição por

CVSS 3.1
5.5
Média
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Eximious Logo Designer version 3.82
Description The issue concerns a User Mode Write AV in Eximious Logo Designer, specifically starting at the ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053 location. This indicates a problem with the BuildGradientColorsTable function within the CGradientColorsProfile class of the ExiCustomPathLib library.
Recommendations For Eximious Logo Designer version 3.82, as a temporary workaround, consider disabling the BuildGradientColorsTable function until a patch is available. Restrict access to the ExiCustomPathLib library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾