CVE-2020-7852

Publication date

2021-03-24 21:10:21

Family

krcert

State

PUBLISHED

Description

DaviewIndy has a Heap-based overflow vulnerability, triggered when the user opens a malformed ex.j2c format file that is mishandled by Daview.exe. Attackers could exploit this and arbitrary code execution.