Skip to content
OpenAdvisories
High · 8.8 CVE-2017-2803 EUVD-2017-11946GHSA-rm4h-q62w-77vw

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially c…

Published Apr 24, 2018 · Updated Sep 17, 2024 · Assigned by talos

Description

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 version 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability. This vulnerability only exists in the 64-bit version.

Affected products

VendorProductAffectedFixed
Corel PHOTO-PAINT X8 (Corel TIFF Import/Export Filter (64-Bit) - 18.1.0.661) - x64 version —

References