CVE-2017-2880 in PhotoLine

Summary

An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: Talos
• Reservation: 12/01/2016
• Disclosure: 10/05/2017
• Moderation: VulDB entry created
• Entries: VDB-107544 (1)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00611
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2880
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2880
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2880/