CVE-2017-2880 in PhotoLine

सारांश

द्वारा MITRE

An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• जिम्मेदार: Talos
• आरक्षित करना: 01/12/2016
• प्रकटीकरण: 05/10/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-107544
• CPE: तैयार
• CWE: CWE-119 (पुष्टि की गई)
• CVSS: 7.8 (NVD)
• EPSS: 0.01447
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2880
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2880
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2880/