PT-2023-11670 · Freeimage+1 · Freeimage+1
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FreeImage version 3.19.0
Description
The issue allows remote attackers to run arbitrary code via the use of a crafted psd file, exploiting a Buffer Overflow vulnerability in the
ReadImageLine() function within PSDParser.cpp.Recommendations
For FreeImage version 3.19.0, consider disabling the
ReadImageLine() function in PSDParser.cpp as a temporary workaround until a patch is available. Restrict the use of crafted psd files to minimize the risk of exploitation.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Freeimage