Beveiligingsadvies

CVE-2018-3859

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-07-19 19:00:00
Laatst bijgewerkt 2024-09-17 00:26:11
Toegewezen door talos
CVSS-score 8.8
Status PUBLISHED

Beschrijving

An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution. A different vulnerability than CVE-2018-3860.