CVE-2020-13581

Name of the Vulnerable Software and Affected Versions SoftMaker Office PlanMaker version 2021 (Revision 1014)

Description A specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is smaller than the size used for the copy, resulting in a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this issue.

Recommendations For SoftMaker Office PlanMaker version 2021 (Revision 1014), consider avoiding the use of documents from untrusted sources until a patch is available. As a temporary workaround, restrict the opening of documents to trusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.