PT-2019-15680
CVE-2019-18821
·
Publicado
2019-11-07
·
Atualizado
2019-11-08
Descrição por
CVSS 3.1
5.5
MédiaMétricasAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Eximious Logo Designer version 3.82
Description
The issue concerns a User Mode Write AV in Eximious Logo Designer, specifically starting at the
ExiCustomPathLib!ExiCustomPathLib::CGradientColorsProfile::BuildGradientColorsTable+0x0000000000000053 location. This indicates a problem with the BuildGradientColorsTable function within the CGradientColorsProfile class of the ExiCustomPathLib library.Recommendations
For Eximious Logo Designer version 3.82, as a temporary workaround, consider disabling the
BuildGradientColorsTable function until a patch is available. Restrict access to the ExiCustomPathLib library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾