CVE-2017-2880 in PhotoLine

Riassunto

di MITRE

An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Talos
• Prenotare: 01/12/2016
• Divulgazione: 05/10/2017
• Moderazione: accettato
• Voce: VDB-107544
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 7.8 (NVD)
• EPSS: 0.01447
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2880
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2880
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2880/