Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c796-m9cj-mrx8

Опубликовано: 04 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 49%
0.00261
Низкий

7.1 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.1
nvd
почти 4 года назад

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 49%
0.00261
Низкий

7.1 High

CVSS3

Дефекты

CWE-787