Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-23400

Опубликовано: 03 мая 2022
Источник: nvd
CVSS3: 7.1
CVSS3: 7.1
CVSS2: 5.8
EPSS Низкий

Описание

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:accusoft:imagegear:19.10:*:*:*:*:*:*:*

EPSS

Процентиль: 49%
0.00261
Низкий

7.1 High

CVSS3

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-193
CWE-787

Связанные уязвимости

CVSS3: 7.1
github
почти 4 года назад

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 49%
0.00261
Низкий

7.1 High

CVSS3

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-193
CWE-787