Skip to content
OpenAdvisories
High · 8.8 CVE-2017-2804 EUVD-2017-11947GHSA-hcqp-p6hj-h83v

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted T…

Published Apr 24, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

A remote out of bound write vulnerability exists in the TIFF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted TIFF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific TIFF file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Corel PHOTO-PAINT X8 (Corel TIFF Import/Export Filter (64-Bit) - 18.1.0.661) - x64 & x86 version —

References