PT-2017-15590

CVE-2017-2880

·

Published

2017-10-05

·

Updated

2022-06-07

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Computerinsel Photoline version 20.02
Description A memory corruption issue exists in the .GIF parsing functionality, allowing potential code execution through a specially crafted .GIF file. An attacker can trigger this issue by sending a specific .GIF file.
Recommendations For Computerinsel Photoline version 20.02, avoid using the .GIF parsing functionality until a patch is available. As a temporary workaround, consider restricting the ability to open or process .GIF files to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾